Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/60398717-9ab2-3836-a775-5f598e07fc2e.roa
File:                     60398717-9ab2-3836-a775-5f598e07fc2e.roa (raw, json)
Hash identifier:          tAUVPzPN0jzL+e6TT1T1oEy7UegoN2GBaTY/YQ/aqEM=
Subject key identifier:   19:2A:46:34:FD:55:9A:03:D4:02:EE:B4:74:7A:36:0D:92:72:A5:9C
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F432858456822E995161029BB6FAE9F00
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/60398717-9ab2-3836-a775-5f598e07fc2e.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     393429
IP address blocks:        216.127.220.0/24 maxlen: 24
                          216.127.221.0/24 maxlen: 24
                          139.60.8.0/21 maxlen: 24
                          216.127.219.0/24 maxlen: 24
                          216.127.222.0/24 maxlen: 24
                          216.127.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e9:95:16:10:29:bb:6f:ae:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=bfb35cc2-196b-40b4-a47d-d6c48594d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:25:b4:d3:1d:e9:48:7c:7c:b1:53:8c:06:
                    9d:9b:89:67:6d:56:2f:5f:9b:56:51:e1:7d:01:00:
                    7f:5f:74:f8:3d:3d:29:c3:5d:c8:f0:c6:34:b5:c1:
                    16:53:fb:5f:4c:60:91:1d:18:9b:70:80:3b:d7:98:
                    95:a2:e5:47:13:ba:18:41:97:40:f4:8e:8b:7d:3e:
                    f1:31:17:dd:ec:47:db:04:fc:f3:28:b1:16:83:f4:
                    5c:a2:85:b6:d6:cb:e8:13:d3:07:5f:3e:34:0c:e3:
                    fd:ca:3b:7e:9a:ed:40:fd:be:0f:c3:d4:17:6a:79:
                    c0:0a:ff:85:60:05:bd:af:61:e7:ae:bc:f7:cc:c0:
                    10:c5:9d:ed:32:c6:3c:81:d0:a7:38:72:1f:7c:75:
                    22:0f:87:e8:f4:cb:c4:77:07:af:4a:30:1c:03:39:
                    90:b1:c9:d1:64:be:b4:01:23:c5:71:f6:8d:88:ef:
                    68:38:0a:94:e5:61:82:79:48:a9:4b:9c:77:85:78:
                    25:fc:21:9f:d3:19:57:33:ec:9b:92:67:9e:07:cb:
                    18:9c:62:e2:c8:bd:b8:c6:90:90:02:ec:d8:2e:5a:
                    94:fd:2d:f2:68:a7:79:36:70:0e:a2:94:73:8d:80:
                    76:da:58:03:0c:c7:51:cd:9a:35:ea:2b:d4:ef:6e:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:46:34:FD:55:9A:03:D4:02:EE:B4:74:7A:36:0D:92:72:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/60398717-9ab2-3836-a775-5f598e07fc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.8.0/21
                  216.127.219.0-216.127.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:d0:46:a2:f7:fd:11:c0:25:cb:92:51:2b:0a:f3:1c:9d:
         9b:d8:47:14:66:4c:3b:99:e8:05:c6:18:33:d0:d5:6d:47:4c:
         73:d4:35:9b:5a:f0:a2:fb:8e:fd:39:5a:0b:7d:a8:93:ae:9d:
         60:dc:1f:0a:a5:2d:50:a9:61:f3:26:23:1d:79:cf:04:74:ad:
         c9:17:83:1b:d2:a0:de:85:94:ac:99:d8:b9:ea:55:86:6b:6b:
         2d:0c:df:78:4d:7c:e8:d2:8c:74:c0:16:c3:96:e5:45:bf:76:
         8c:fc:54:35:fb:e0:62:67:8f:2a:61:9c:ea:8f:74:3b:e6:9e:
         d6:03:b4:41:10:3e:70:22:14:f7:45:80:65:fa:72:22:09:ce:
         1f:e6:16:f3:a8:f6:f3:d1:97:1e:48:55:86:02:65:a7:06:a7:
         e0:32:85:f8:31:ca:21:6d:d2:09:5a:6c:5d:b4:9e:bd:e0:c5:
         0e:90:c0:1f:31:1c:db:7b:31:67:9b:6e:32:a8:85:c2:87:65:
         00:07:00:d5:ca:3f:ba:5b:19:eb:35:41:ce:92:6f:cb:ab:5e:
         9c:60:ab:d1:b4:27:95:17:f1:9b:78:ae:3a:73:29:10:12:18:
         5a:b4:d6:34:65:44:fa:df:df:90:90:f9:a7:9d:85:4b:c6:a7:
         9b:a5:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:06:55 2024 by rpki-client on console-fra.rpki-client.org