Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
File:                     fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa (raw, json)
Hash identifier:          x/K3Uyhp65hR8COnT5lELPkguVfSP2Bg7V9RZ2RSKLk=
Subject key identifier:   A5:D1:E5:F9:3D:37:6A:46:33:B7:17:5D:24:54:13:59:36:F9:24:DD
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584582A8993E0BF2C6EA054A3E00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     11260
IP address blocks:        173.237.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:99:3e:0b:f2:c6:ea:05:4a:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=ec240e12-05cb-4bbf-9220-3e02e1b64b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:0c:12:74:58:da:48:49:34:54:04:74:4e:
                    23:12:cb:0b:27:1b:68:e1:d4:bd:55:93:b2:ab:c1:
                    ac:8e:c4:10:17:67:a2:5e:5f:d0:9b:26:ed:d8:43:
                    6c:82:c0:5b:50:e9:3c:e0:87:3a:52:74:f2:67:7e:
                    ab:c3:33:ef:98:99:03:5a:bd:16:c1:29:53:06:2f:
                    54:ed:b9:c9:80:39:8b:1a:e6:6f:a2:8a:5a:c9:ee:
                    97:cb:84:17:67:1a:cf:0b:75:a0:31:1c:16:ff:55:
                    2f:ab:59:bd:a3:09:70:42:4b:4a:2b:47:74:df:b2:
                    51:37:75:b3:18:c7:2e:9b:18:59:79:b3:4e:49:6d:
                    db:bc:a0:02:08:37:0e:44:58:b1:0d:35:2e:32:3f:
                    a5:8c:f0:e0:85:b1:51:15:cd:cc:d9:95:65:51:01:
                    20:fc:16:ce:b4:4d:9d:94:59:46:ba:d1:ff:34:d9:
                    aa:ab:7e:c7:46:46:d5:a0:db:fb:54:c2:8c:56:f3:
                    bd:d5:d7:ab:72:3a:98:dc:20:d6:c4:6b:ee:f4:aa:
                    a3:9d:c6:7d:29:08:02:bd:94:35:b9:55:b4:37:13:
                    6e:3b:af:22:e3:03:f9:b8:eb:ba:57:5b:e4:0d:56:
                    ab:01:29:ce:8e:7d:10:45:8f:29:24:e4:3f:50:33:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D1:E5:F9:3D:37:6A:46:33:B7:17:5D:24:54:13:59:36:F9:24:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:86:41:09:56:9f:3f:9c:d8:5e:b3:cb:05:9d:56:ae:4b:44:
         6d:94:ec:f9:e0:c8:ee:bf:93:3c:5a:1d:0f:0c:ac:f5:8c:55:
         b1:11:f5:de:d8:97:5c:44:d0:41:a0:f8:26:f4:86:02:a2:9a:
         56:95:f4:9c:65:33:9b:2a:3f:d0:85:c7:c7:3b:fb:46:dc:5f:
         22:33:17:c0:13:36:ed:53:49:71:c8:c8:83:a9:b5:9b:8c:95:
         dd:f7:e6:96:70:4c:1c:b2:d4:38:e1:c2:25:02:44:78:68:33:
         06:a5:82:6e:a5:12:cb:7e:ce:dd:d2:15:e5:cf:61:33:1e:a0:
         0c:81:c0:80:ab:93:9d:51:28:1c:eb:3c:d2:ed:9a:bf:34:4b:
         45:84:c1:59:ed:c4:ec:68:b4:b7:c9:1d:7e:1b:37:d3:cf:6b:
         07:11:4e:32:0d:6d:2b:75:01:c4:8e:1c:06:15:26:ae:3b:75:
         4e:ee:bf:6b:44:b3:9a:5f:9f:df:97:50:a3:af:34:db:46:31:
         e1:00:5f:80:b3:f2:f1:3e:5a:a2:a5:0a:f1:41:a3:ee:62:54:
         39:f9:0d:87:df:f0:4a:01:87:45:00:8e:6e:73:3a:ca:73:b7:
         08:50:66:9a:fd:89:b1:82:3f:65:9d:3c:6a:ac:a5:6f:4c:b9:
         78:c2:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:49:38 2024 by rpki-client on console-fra.rpki-client.org