Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
File:                     73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa (raw, json)
Hash identifier:          uouwdtmiPpuxridIYq+HWAP0telIwUDHXLFifo5rMCw=
Subject key identifier:   58:41:8D:D6:6E:97:CC:A0:AD:57:66:60:E7:17:06:EA:F6:F8:59:0E
Certificate issuer:       /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial:       010D0C9F43285845BA8C78297F2430A8EC07D080
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
Signing time:             Wed 01 May 2024 13:29:27 +0000
ROA not before:           Wed 01 May 2024 13:29:27 +0000
ROA not after:            Tue 30 Jul 2024 13:29:27 +0000
asID:                     998
IP address blocks:        208.94.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:8c:78:29:7f:24:30:a8:ec:07:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
        Validity
            Not Before: May  1 13:29:27 2024 GMT
            Not After : Jul 30 13:29:27 2024 GMT
        Subject: CN=8c8d1e76-67d2-4888-98e8-7d7145554d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:93:7a:4b:c4:1e:f7:9c:41:a2:85:56:ad:
                    d8:8a:bf:71:a1:45:75:66:c6:bd:d4:a8:76:0a:ff:
                    12:4d:5a:e8:29:72:ba:3d:a5:30:d2:e2:a1:ed:b6:
                    2a:6a:bd:5d:b7:39:96:15:85:1f:0a:2e:0f:5b:ce:
                    f1:90:20:d5:52:ec:f8:fc:5b:5c:72:94:3d:aa:56:
                    f9:e3:e7:71:ba:77:e7:ed:b5:c6:4c:e2:80:78:f7:
                    04:17:16:52:a2:06:3d:4d:c7:71:ae:4a:fe:aa:47:
                    0d:6c:94:a2:89:9b:76:4f:fd:66:d5:15:ea:c0:7c:
                    a0:31:f9:f9:cf:7b:ac:4a:4f:73:5f:e0:e1:8f:1f:
                    be:20:e6:de:cc:cd:98:5d:98:f4:50:7a:97:6e:5e:
                    fa:3f:e1:c7:a7:f2:85:75:fc:b8:f1:e7:83:c4:2c:
                    28:e2:0f:3b:14:88:a0:9d:14:74:09:e4:6a:47:91:
                    4e:64:b6:74:b1:2c:a5:02:ff:73:5a:53:67:3f:98:
                    c7:c3:0d:bb:30:85:76:5d:20:af:9b:ea:ac:5e:39:
                    b2:86:fe:b9:98:f7:e1:92:58:86:cf:e3:c3:54:34:
                    1d:86:9f:da:39:16:d8:83:d9:43:6e:ce:04:68:7d:
                    32:79:19:d2:d8:55:31:73:aa:8e:d0:d4:c7:7b:b3:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:8D:D6:6E:97:CC:A0:AD:57:66:60:E7:17:06:EA:F6:F8:59:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:78:c4:41:d3:f2:eb:ac:02:9c:04:d2:b4:19:ba:08:ef:42:
         ff:ba:e6:76:4a:93:90:fe:f9:10:a0:99:e0:6b:74:47:fb:30:
         2a:fe:5d:3b:ef:dd:06:03:36:60:72:65:2e:81:c5:85:1e:56:
         9b:c3:eb:84:14:2a:3a:70:98:c3:30:d4:32:28:76:a4:27:d9:
         e2:b1:9c:61:a1:93:e3:24:73:7c:09:d2:bf:0c:d2:f2:f0:e7:
         49:3e:db:04:a6:81:12:0c:85:3c:e4:47:1e:cb:d7:b6:33:1d:
         79:46:7d:51:af:93:1e:9f:4b:ac:49:08:8e:c0:f9:7a:ef:17:
         02:f7:dd:69:d9:78:4e:c6:05:fb:39:54:79:63:39:14:18:18:
         22:cb:9d:05:e0:e3:75:41:fc:68:f1:89:72:b2:4b:06:13:58:
         a5:7c:52:d8:e8:79:68:9e:e2:35:0b:9d:e0:ef:d0:3e:08:a0:
         be:f2:35:52:0e:e0:f2:6f:40:ca:59:b9:59:ec:e8:8a:b0:4a:
         cf:bb:d3:dc:04:25:50:44:ef:36:ae:43:64:eb:07:ca:c5:87:
         92:c1:b0:0f:43:7a:ab:e1:47:0c:00:1c:3b:aa:c2:36:be:94:
         65:aa:08:ec:eb:96:d0:a5:d4:16:11:51:d0:59:b4:3f:57:6b:
         75:4b:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:36:33 2024 by rpki-client on console-ams.rpki-client.org