Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
File:                     5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa (raw, json)
Hash identifier:          4FCKw7C0OaSEUTfhYp5vY+KCZi5t8KBnqT/COkWpGNM=
Subject key identifier:   14:52:99:D5:FF:A5:53:CB:80:D2:3A:23:D1:F9:16:51:FC:38:7E:EA
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584582A8996D3338E38B74284A40
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     11260
IP address blocks:        199.255.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:99:6d:33:38:e3:8b:74:28:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=8ff7017e-a3b3-4719-872c-216de7157ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:ec:ba:11:99:81:c3:01:f8:13:16:bf:b1:
                    9e:7c:36:d5:d5:98:04:74:12:d7:1e:fa:86:f5:8a:
                    dd:42:70:8f:eb:c3:4f:0f:5c:d2:b2:21:16:74:ce:
                    76:d6:8a:58:09:88:de:f7:89:cf:bf:b4:42:89:5a:
                    26:f8:b2:50:bb:72:ed:13:88:dd:91:ab:4f:a3:cb:
                    c1:1d:33:2c:05:3a:77:ee:e2:be:2d:e6:7c:04:4c:
                    0c:3e:94:5c:c6:c6:02:27:9e:5d:a9:8a:69:ab:43:
                    9e:d1:f8:2d:52:ff:79:c7:db:2f:fc:1b:b0:d2:90:
                    32:0e:2d:0e:92:0c:82:c9:13:ca:20:88:c6:97:36:
                    f6:08:9c:3d:1a:97:fc:d8:55:2a:e8:87:8b:4c:e5:
                    c1:29:95:8e:06:8d:2f:46:09:58:a3:3f:e0:ef:12:
                    11:cb:cd:20:cb:68:31:06:fb:b0:03:62:7f:23:16:
                    19:5a:15:47:ed:85:60:9b:b6:ba:da:d6:88:3e:75:
                    c8:4c:cc:81:ca:73:bc:e2:f5:e8:5f:42:95:be:78:
                    dd:04:59:ae:ff:fe:6b:1c:e0:0a:53:07:51:a7:76:
                    25:5f:09:ef:6b:25:96:9e:15:7f:4d:f1:6d:fd:c0:
                    93:17:9d:98:20:15:99:ac:ed:7c:80:12:1b:1f:df:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:99:D5:FF:A5:53:CB:80:D2:3A:23:D1:F9:16:51:FC:38:7E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:00:d9:2a:4b:86:76:a8:34:74:60:84:3a:0b:77:5b:60:
         6e:ef:e4:2f:49:53:6d:28:de:d1:36:c2:88:f8:c7:cd:53:70:
         42:5f:e8:a0:fa:1e:12:3a:c6:0b:c2:0d:23:2c:78:86:c7:a5:
         d4:e3:d2:78:96:23:33:87:24:66:53:0b:20:b9:85:53:48:37:
         bd:ff:f1:e4:85:74:f3:5a:fa:73:0a:2a:47:8e:9f:5d:3b:5c:
         c8:de:aa:c6:7a:53:5a:01:c2:f1:b7:e2:b8:f1:e6:df:b3:fe:
         48:8f:be:98:d7:b4:d8:55:36:01:2a:36:d6:e3:7e:89:34:e8:
         90:e3:dc:be:0f:1e:9f:24:40:0f:ba:44:ea:39:0c:ab:a2:e7:
         f6:03:f2:fd:0c:6c:19:ca:2a:14:cb:21:45:61:78:44:d1:f7:
         22:70:cc:60:98:21:66:2b:f1:97:fd:c6:aa:7e:56:a1:e1:67:
         51:99:fe:64:77:85:40:31:99:01:40:3d:13:67:60:49:ca:6e:
         9b:c7:a8:e4:fe:ae:08:c7:12:c6:0b:2d:2e:29:5e:a2:da:7e:
         99:9c:04:b7:86:79:72:20:f5:02:1b:9f:ef:ba:c8:7c:00:b6:
         7d:53:10:21:e0:6f:ca:86:8a:6a:fd:27:42:ba:01:11:07:0f:
         8c:c6:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:40:02 2024 by rpki-client on console-ams.rpki-client.org