Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
File:                     4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json)
Hash identifier:          saOJr+ldreOvAAT2tEFmpuIu0a9geEkmZNJZcgoNJB8=
Subject key identifier:   51:96:87:C5:6F:D2:63:6C:45:40:81:71:80:F5:1E:B7:99:98:BF:DD
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F4328584596333FAB6884526FD1369500
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        168.245.151.0/24 maxlen: 24
                          199.19.89.0/24 maxlen: 24
                          192.139.134.0/24 maxlen: 24
                          199.19.91.0/24 maxlen: 24
                          52.144.58.0/24 maxlen: 24
                          199.19.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:3f:ab:68:84:52:6f:d1:36:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=c7e86aae-b25b-4957-a25e-2e4a078964bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:c5:d6:40:90:d8:17:e6:e8:3d:c9:b9:e6:
                    ab:06:aa:f2:1b:db:a3:58:10:b3:30:18:94:b4:bb:
                    fa:d3:63:0d:7b:a3:e8:6d:da:ac:11:77:a7:f2:c9:
                    4b:66:f9:38:fe:a0:82:14:65:9e:6d:10:69:1a:56:
                    c8:b1:ca:37:25:ac:99:37:77:00:b3:80:05:e6:c7:
                    0c:25:fc:63:9b:1c:26:11:07:dd:c3:31:76:6a:b6:
                    62:bb:c0:44:8d:c6:96:ce:8a:18:9a:33:7c:37:a8:
                    95:cb:8f:d8:c7:24:0f:7f:cc:7a:f6:e6:eb:3c:21:
                    d1:11:99:fa:db:88:c2:9c:aa:29:34:e7:11:a9:59:
                    34:fb:09:02:96:c4:43:fa:77:41:f9:e2:43:00:7f:
                    97:64:0a:25:c4:f5:6f:de:df:e2:15:50:e0:74:5f:
                    ca:d0:c6:9e:d8:0c:b8:55:f6:a0:fa:d6:b1:8f:e0:
                    8f:56:45:9a:9e:db:b5:72:f4:c3:ae:48:14:11:fe:
                    b7:b4:a7:4f:62:6c:b6:c8:a6:f4:17:dd:d8:7a:2d:
                    dd:8e:dc:0c:f9:f1:6b:bc:8a:55:9c:e4:8e:79:e6:
                    1e:a8:7f:81:90:fc:c2:e1:27:ad:a8:bd:ce:11:2b:
                    d1:80:00:43:4e:ad:2f:94:39:93:93:f7:db:87:cb:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:87:C5:6F:D2:63:6C:45:40:81:71:80:F5:1E:B7:99:98:BF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.58.0/24
                  168.245.151.0/24
                  192.139.134.0/24
                  199.19.89.0-199.19.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:04:8f:69:ab:9d:f7:b2:ea:c9:27:6c:a2:47:3c:54:a1:
         3b:48:8d:8a:c5:bb:27:9f:5f:51:ff:27:0a:6a:8c:02:ac:44:
         51:00:46:b6:43:d6:a4:03:8f:38:6e:80:e2:ec:3b:46:99:d4:
         64:0f:da:42:0e:85:28:1e:2f:ec:d5:7d:14:21:25:10:b1:d4:
         8d:ba:92:ff:5b:33:03:0e:2c:8d:ec:1e:11:de:9c:62:96:20:
         f2:10:f5:55:0d:ba:19:f1:42:0e:36:4c:95:b1:80:98:2b:12:
         4b:ff:e1:8d:64:48:fc:9c:ba:b2:3a:83:f7:11:9a:c6:9f:6b:
         1b:39:2e:0f:f9:5c:4a:f4:39:fc:38:24:27:b1:6e:72:c9:91:
         bb:f7:2c:e3:45:18:84:f1:ef:72:27:c8:95:e4:09:21:6b:97:
         14:8d:c0:58:b0:81:ca:f4:ff:61:99:4c:ea:27:c3:cd:02:6b:
         1b:49:7f:12:46:b0:db:42:a4:05:87:80:99:fb:9d:a2:78:cf:
         e3:d5:a5:fc:ac:21:08:1c:20:80:74:29:f6:09:cb:cd:1b:3f:
         92:db:14:8d:fb:95:64:29:55:6d:f5:b4:eb:42:aa:e8:a6:a9:
         d9:23:0b:84:07:c5:d4:06:b0:ba:6b:b7:2c:41:5f:4b:7e:7e:
         c9:19:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:29 2024 by rpki-client on console-ams.rpki-client.org