Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          qmlLeTsL183QLfKVVwrbCLf1rVsH3PIoqfC0TkWH60Q=
Subject key identifier:   F8:8A:27:E6:0A:9F:D4:56:CC:AA:F5:0C:AD:0B:E2:B4:61:9B:93:82
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285844F46558C60522D13DC903F200
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     395092
IP address blocks:        172.96.136.0/22 maxlen: 24
                          64.28.236.0/23 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:58:c6:05:22:d1:3d:c9:03:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=83ff94df-3756-40db-b6cd-56a742ad35a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:87:7b:8c:82:91:a9:fe:3e:37:5c:71:6b:
                    f6:7e:53:cf:d5:58:90:e0:4f:43:9e:1c:9d:34:7f:
                    3f:eb:c3:cd:7b:33:90:0c:8a:36:1a:cc:d9:a5:9b:
                    67:df:47:f1:43:8c:8f:d8:78:2a:77:b5:66:42:d3:
                    3b:b7:ec:20:67:75:36:98:fe:da:b3:c3:22:7d:73:
                    31:88:21:98:ed:ca:7a:0b:e4:ac:19:83:81:32:5c:
                    fd:e9:72:cf:f2:64:9a:fa:29:e2:b1:ba:fa:d0:bf:
                    aa:6c:49:96:b4:fa:1d:b8:49:7c:cc:11:77:73:01:
                    9b:94:e7:1e:2a:49:b9:1b:c8:bd:3e:72:6d:96:bd:
                    7b:51:b5:4d:ef:21:a4:9f:45:6b:ee:bd:08:3b:20:
                    19:fa:2e:0e:9b:59:d5:ca:c2:ab:ff:64:e3:e4:86:
                    95:1b:84:af:c1:57:1a:77:7a:4f:0a:bb:ec:3c:f1:
                    1e:05:4f:3b:bf:ae:01:a9:50:a8:b5:9a:7a:16:2d:
                    eb:b2:1d:8d:10:2b:cd:7c:2a:79:5b:e8:33:f8:0e:
                    b8:c9:e5:c9:20:f8:db:39:61:58:70:d0:95:42:96:
                    44:d5:ae:2b:0b:05:c1:25:37:0e:73:a9:27:f5:61:
                    19:52:07:94:77:5a:47:4e:cf:3e:4b:f9:58:84:7a:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:27:E6:0A:9F:D4:56:CC:AA:F5:0C:AD:0B:E2:B4:61:9B:93:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:84:76:68:4d:b2:9e:88:81:c4:5a:6e:00:27:bc:9f:44:
         37:50:f3:59:15:aa:2d:bc:ef:41:8b:33:84:3e:5f:69:77:d2:
         fb:9f:a5:3e:6c:02:68:19:00:f7:a8:fd:bf:73:e3:bd:76:e5:
         82:1d:30:c8:d7:fd:0b:ae:c1:b2:62:59:3d:f7:d7:a2:1c:f1:
         e2:88:65:bd:99:3e:68:dc:87:42:14:e1:61:ad:68:d4:02:37:
         4b:1c:77:cf:49:0e:b3:51:c7:46:b8:ed:6c:a9:69:63:15:16:
         2f:bb:c9:19:91:b0:5c:86:e7:c3:e5:ab:4b:d7:ff:a7:b5:e1:
         41:98:f5:96:4d:db:f0:da:4b:32:18:9f:20:3d:b6:a0:e5:f4:
         9c:20:cc:47:48:b2:86:94:b0:79:79:74:17:e9:78:e6:e7:70:
         fb:ac:1a:d1:88:87:d2:1d:1b:0e:a0:e4:0b:e9:7f:56:a7:4a:
         9f:b9:cc:34:a7:63:1b:92:40:57:d4:5e:62:4d:88:74:7f:53:
         1f:70:95:86:02:ab:e3:0d:f9:c0:e8:06:60:de:25:97:40:bc:
         4c:63:49:63:68:88:6c:41:a0:88:cf:83:d6:be:9a:56:26:22:
         46:27:0a:31:de:c3:94:25:31:60:ba:e0:11:40:80:bd:43:c7:
         aa:ff:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:13 2024 by rpki-client on console-fra.rpki-client.org