Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
File:                     a662b604-8a40-31fd-848a-cd7f0cad04af.roa (raw, json)
Hash identifier:          5WktCSf8PQdE1cSgSsWDkaMGhai132Ss8YJySyK2PHM=
Subject key identifier:   5D:77:CE:7C:E1:FF:11:7F:15:E2:8E:EE:56:6B:8F:FA:AF:E2:66:F9
Certificate issuer:       /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
Certificate serial:       010D0C9F43285845777DBEA3729140E1073301C0
Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     396982
IP address blocks:        204.62.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:be:a3:72:91:40:e1:07:33:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=9603393a-2abb-4d7a-a4af-058822aa2b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:56:79:02:d9:bb:13:f2:2c:39:80:c6:a2:
                    ca:f1:6c:bc:42:77:48:29:ae:6c:f3:fd:ba:2e:c1:
                    c0:17:dd:b6:1c:e1:6b:5c:ab:b1:cc:ac:fc:01:5c:
                    38:a5:a3:c2:85:0c:c0:06:c7:ee:42:9e:08:20:57:
                    49:24:65:91:f5:a2:6f:32:7a:72:45:af:dc:ad:dc:
                    a0:2e:e8:49:cf:54:7a:4c:08:ad:72:8a:1f:94:8c:
                    3b:d1:61:37:41:7e:f6:86:d2:1d:9e:1c:e3:8e:2b:
                    89:16:a2:9e:48:7b:48:0c:ff:c3:14:7c:80:0d:81:
                    4f:f2:bd:86:3b:37:03:1a:8b:3f:77:68:94:fc:40:
                    3d:3d:84:bc:87:a5:40:a0:e6:fc:27:0b:15:9b:10:
                    04:28:6c:34:ba:6c:6d:8f:d6:f7:96:ea:7b:65:6d:
                    82:4d:44:5e:f9:1d:89:d2:ec:cb:77:b9:23:9e:11:
                    4f:59:49:46:84:f3:d7:59:c3:e0:82:19:6c:dd:2d:
                    3e:a2:84:5b:fb:df:0f:a6:aa:d5:83:b7:e9:e9:bc:
                    b7:f0:4a:0d:d8:54:92:8b:d7:f6:59:a8:0f:86:7f:
                    d0:9e:90:b1:91:59:16:bd:3f:90:26:3b:88:5c:12:
                    e0:22:26:a2:0c:4d:de:4d:52:9c:0b:5e:75:03:d3:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:CE:7C:E1:FF:11:7F:15:E2:8E:EE:56:6B:8F:FA:AF:E2:66:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl

            X509v3 Authority Key Identifier:
                keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:18:4b:aa:8b:7e:90:e7:80:26:42:ac:54:c9:3e:0d:1f:
         f4:c7:c0:4d:c3:4d:ad:0a:ec:05:34:48:3e:dd:88:f4:00:3a:
         08:5f:42:93:3a:81:79:a2:8b:24:87:ec:c0:12:a2:7e:64:9b:
         43:79:a2:6d:57:5b:28:5c:64:c1:da:1d:7b:93:fa:bf:2f:c3:
         14:63:52:fa:d4:5c:6b:0a:f2:c9:13:d4:cd:e3:38:d6:05:81:
         b6:7d:10:8a:44:f6:b0:81:0b:b7:bf:b8:54:c5:a3:5a:c2:3b:
         14:d6:0b:da:95:03:eb:1a:96:d6:ce:1f:3e:ca:68:d2:09:14:
         1a:b8:7c:fb:ea:6d:05:d9:9d:ec:3d:ec:3f:45:ed:db:02:4a:
         c3:1a:18:66:cc:aa:6b:2a:ad:53:9f:d5:b6:ea:e0:c1:b2:e8:
         c0:e8:d4:7f:1c:54:f4:3f:b0:22:e8:3b:3f:0b:97:2a:ce:11:
         37:16:d3:1c:b7:cd:bd:e6:73:01:c6:38:86:a9:84:97:5d:d8:
         9c:b8:e1:eb:3b:ee:35:e8:1b:5a:3b:c6:b7:99:e7:f9:95:39:
         6e:98:2d:24:20:fc:f4:06:ee:67:6f:7d:4f:11:d9:a1:e7:76:
         ee:7f:ca:21:4f:d1:94:77:99:20:8c:b3:84:8e:b7:ae:34:d1:
         f1:e6:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:36:37 2024 by rpki-client on console-ams.rpki-client.org