Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa
File:                     fb26b1b7-2475-3382-8f32-0ab781ca6023.roa (raw, json)
Hash identifier:          bz422xKaX7VKT5RqTLZxdkJMCumZnlAVUOdVfKu/BJQ=
Subject key identifier:   FA:A7:6B:C9:6A:24:15:68:C8:2E:CF:4E:40:71:9E:71:5D:A0:52:BE
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F432858457D132C077F0106693B553520
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     18875
IP address blocks:        162.211.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2c:07:7f:01:06:69:3b:55:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=84d5a6db-2755-4c77-8e44-5cf0d729f70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:c6:af:b4:dd:7a:72:e4:e8:f6:5b:19:ea:
                    95:db:1a:72:2a:bc:72:ca:61:70:c6:62:28:d3:f9:
                    58:e6:46:c0:33:4d:34:87:6e:f4:13:4e:e9:f2:4a:
                    45:77:f6:08:15:cd:ad:15:5d:3c:32:cf:3d:69:0f:
                    18:10:05:1f:da:93:d1:7d:6b:3c:77:ec:a6:1e:b1:
                    28:01:60:ec:69:0a:3f:db:2c:1f:34:82:1d:5d:1a:
                    35:4d:50:23:fa:21:db:7b:65:44:a9:40:9f:c3:a0:
                    bd:28:32:f8:78:0d:6a:fc:6d:f0:c5:57:58:1e:ce:
                    f0:1d:7f:8d:34:2e:5c:76:38:29:84:b5:73:10:51:
                    0d:3c:51:0e:8a:0e:b3:34:38:5f:11:c2:3b:3c:11:
                    7b:4d:99:22:c0:0a:16:00:e3:44:5a:d6:2e:23:98:
                    91:4e:7e:cc:62:99:8e:62:95:ed:66:89:4d:8e:15:
                    54:84:5f:56:78:84:30:d2:55:e9:4e:71:12:10:e3:
                    27:bb:f4:dd:b6:53:60:76:f0:3b:dd:76:5f:bc:04:
                    7b:87:6d:00:f7:66:3d:5a:44:b1:be:65:f8:8e:4c:
                    20:77:3f:4f:39:bc:18:05:8f:9f:70:ae:a4:ea:0a:
                    15:99:64:45:2e:94:a2:47:08:11:9a:05:31:2f:1c:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:6B:C9:6A:24:15:68:C8:2E:CF:4E:40:71:9E:71:5D:A0:52:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:0b:19:71:af:10:6a:76:58:64:a4:61:5d:ad:ba:70:90:
         fb:2c:22:c4:7d:4d:85:ce:55:ab:ee:c9:5b:dd:2f:45:37:53:
         7a:58:3d:5e:ea:ad:5a:23:10:fc:c2:bf:02:bb:55:5f:73:08:
         14:50:8c:e5:df:3f:a2:5e:aa:72:4b:26:16:10:3c:e0:b6:2c:
         df:f6:8e:54:5a:2b:e2:62:f2:c2:ac:c7:8d:5e:55:cf:0c:cb:
         a1:13:a2:f7:a7:c3:a8:9f:f1:97:0e:28:25:1c:8b:68:2e:70:
         e2:bb:92:32:ee:a6:e6:14:de:4f:ef:ef:97:08:44:ae:38:82:
         97:88:fa:65:95:6c:15:f9:6f:bd:62:99:b7:f6:eb:a8:95:af:
         e3:88:47:59:4d:f1:e9:84:48:d6:02:36:b4:a1:33:e1:30:49:
         8f:a1:e6:1d:f4:c1:3b:b1:04:05:c4:da:e6:2c:6a:56:95:e6:
         f9:b7:11:7d:51:99:bd:f6:8e:86:73:df:7b:10:d0:e6:d3:c0:
         a7:a5:69:19:72:6f:12:e9:7b:73:d3:b8:64:70:7c:f4:db:08:
         41:68:3f:9d:b0:97:4e:91:24:2d:38:c1:e6:00:b5:34:e2:5a:
         13:5a:92:61:a4:26:a0:2f:34:99:42:9a:7d:46:7f:1d:7c:bf:
         36:1b:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:31:51 2024 by rpki-client on console-fra.rpki-client.org