Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa
File:                     f8396403-aa57-3dc9-82af-4922429dc61a.roa (raw, json)
Hash identifier:          gtrXB17m5t97ina/TNJw6PjpS6USph/AUaV11UTZcrE=
Subject key identifier:   6D:3C:7D:46:66:68:1A:DF:B3:E2:C3:40:67:6F:9C:A1:2A:2A:7F:A2
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285845C8EC2D6A13C11E1257E36400
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa
Signing time:             Mon 06 May 2024 17:03:37 +0000
ROA not before:           Mon 06 May 2024 17:03:37 +0000
ROA not after:            Sun 04 Aug 2024 17:03:37 +0000
asID:                     55154
IP address blocks:        96.44.169.0/24 maxlen: 24
                          66.63.182.0/24 maxlen: 24
                          64.188.29.0/24 maxlen: 24
                          66.63.165.0/24 maxlen: 24
                          66.63.170.0/24 maxlen: 24
                          67.215.228.0/24 maxlen: 24
                          67.215.248.0/24 maxlen: 24
                          72.11.138.0/24 maxlen: 24
                          104.129.23.0/24 maxlen: 24
                          155.94.191.0/24 maxlen: 24
                          155.94.202.0/24 maxlen: 24
                          155.94.221.0/24 maxlen: 24
                          155.94.237.0/24 maxlen: 24
                          155.94.246.0/24 maxlen: 24
                          161.129.69.0/24 maxlen: 24
                          167.160.165.0/24 maxlen: 24
                          192.161.63.0/24 maxlen: 24
                          204.44.104.0/24 maxlen: 24
                          204.152.205.0/24 maxlen: 24
                          204.152.209.0/24 maxlen: 24
                          209.54.98.0/24 maxlen: 24
                          209.54.99.0/24 maxlen: 24
                          209.54.108.0/24 maxlen: 24
                          216.144.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:ec:2d:6a:13:c1:1e:12:57:e3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: May  6 17:03:37 2024 GMT
            Not After : Aug  4 17:03:37 2024 GMT
        Subject: CN=6e301ef2-844f-4230-86f5-6aec7256da45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:60:47:42:0a:53:9c:ea:ad:49:8c:a1:cd:
                    c6:8e:dd:97:98:6a:dc:41:09:3a:b9:90:76:0c:6d:
                    65:c7:0d:d9:a2:88:59:f6:95:f2:c3:ba:64:54:fc:
                    23:9b:9d:6e:b4:16:76:fb:b1:16:2e:65:60:e8:e7:
                    29:f3:f7:b7:71:c8:a0:9c:c1:5e:50:21:bf:19:5a:
                    3b:3b:f2:82:93:d9:32:df:54:23:83:b6:c1:00:f0:
                    2e:b7:c6:ce:b9:54:5f:c4:3d:0f:6b:16:d7:07:7f:
                    0e:84:57:f2:b6:9d:76:88:dc:0d:53:ed:da:aa:a7:
                    42:bd:f5:fe:7d:0f:39:f2:7e:98:e5:6c:2b:e9:66:
                    df:7f:eb:a2:5e:89:78:42:c2:76:68:a6:8c:47:4a:
                    dd:ad:0f:eb:c5:f4:a3:81:5d:02:1d:3e:dd:93:52:
                    56:7e:5f:96:e5:65:58:f1:73:bf:6e:26:aa:a8:92:
                    87:ca:35:9c:2a:67:b1:d6:ad:c2:50:49:4d:51:15:
                    5e:2a:f0:6e:0d:42:09:61:bc:60:fa:83:c3:56:92:
                    8f:06:c2:88:00:ee:fd:85:f3:bc:ad:ab:41:a1:5d:
                    cb:9d:79:32:99:c5:5e:a0:5e:cb:42:85:1f:b5:08:
                    19:3e:ff:ea:72:14:25:42:96:c8:98:43:c8:6e:77:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:7D:46:66:68:1A:DF:B3:E2:C3:40:67:6F:9C:A1:2A:2A:7F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.29.0/24
                  66.63.165.0/24
                  66.63.170.0/24
                  66.63.182.0/24
                  67.215.228.0/24
                  67.215.248.0/24
                  72.11.138.0/24
                  96.44.169.0/24
                  104.129.23.0/24
                  155.94.191.0/24
                  155.94.202.0/24
                  155.94.221.0/24
                  155.94.237.0/24
                  155.94.246.0/24
                  161.129.69.0/24
                  167.160.165.0/24
                  192.161.63.0/24
                  204.44.104.0/24
                  204.152.205.0/24
                  204.152.209.0/24
                  209.54.98.0/23
                  209.54.108.0/24
                  216.144.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:ba:90:90:d9:39:59:7a:c6:3d:e5:59:ed:d9:dc:1c:46:
         c8:31:43:82:24:ed:cf:95:2e:f1:7d:d6:81:b5:d2:7c:da:84:
         e1:55:1d:c2:60:c0:72:d0:3a:d3:3a:12:e5:ef:a1:c3:84:40:
         01:1d:72:47:76:1a:e0:53:9a:47:90:8c:71:a3:14:af:d5:81:
         43:1b:72:c7:be:fb:cd:81:f7:23:fe:2d:3e:c9:3c:fe:50:06:
         48:61:63:12:8b:56:14:45:22:4d:31:61:44:fc:a6:75:cd:d6:
         ca:20:3b:bd:d1:56:f7:bf:3c:68:e6:a1:44:09:65:05:9d:89:
         9f:08:f0:c5:f0:19:a9:8e:15:38:b3:b6:9f:ff:3d:89:f4:0a:
         c2:8e:26:c0:e7:ef:92:f3:e3:94:d6:8b:fd:68:70:52:9d:95:
         7d:40:38:be:35:74:57:55:01:c1:6f:af:6a:47:4b:b0:d9:3f:
         6f:6b:6f:d0:73:6e:20:66:c7:98:fd:12:be:37:19:f2:9b:16:
         21:46:75:4c:cf:88:f9:ea:2a:6e:9c:c8:45:81:eb:8c:18:06:
         b2:05:93:e1:f9:42:a2:65:6a:fe:c6:06:9a:cf:25:68:03:1b:
         9e:4f:68:26:6c:5b:87:d3:36:c2:66:64:ea:47:74:f7:cb:ce:
         6d:3c:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 05:27:10 2024 by rpki-client on console-fra.rpki-client.org