Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
File:                     be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (raw, json)
Hash identifier:          XtlN3/MxaXhdroDZQE3NFAjzu44yDDYG1FQDs04Ixz8=
Subject key identifier:   72:1C:19:53:66:17:10:BB:04:B2:37:8D:CA:77:05:0B:99:87:76:D8
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F43285845A6F36F22E1B815AC3CBEA820
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     31849
IP address blocks:        199.30.104.0/22 maxlen: 24
                          199.102.56.0/22 maxlen: 24
                          104.219.20.0/22 maxlen: 24
                          67.213.128.0/21 maxlen: 24
                          162.212.96.0/22 maxlen: 24
                          2607:2a80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6f:22:e1:b8:15:ac:3c:be:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=8045abbe-688c-41d2-9692-14ef14177134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:8d:d7:c3:05:bb:68:0d:32:0c:96:49:3a:
                    a4:fe:a3:a1:a1:c8:b8:97:fa:53:5e:8e:8b:e5:6f:
                    a8:b9:01:11:e5:cf:79:2b:78:73:7c:63:ea:67:7b:
                    36:08:56:14:1a:28:f1:6a:cb:af:f2:26:c4:ea:98:
                    31:ad:45:43:2a:72:03:97:8a:30:55:02:01:95:49:
                    d5:6d:d7:4b:98:be:a8:63:38:ba:c1:88:ab:ac:77:
                    b3:a0:2f:29:df:1c:2e:06:c4:33:b4:e0:39:33:68:
                    bd:d1:18:28:67:27:d1:55:bb:45:a3:67:93:95:1f:
                    91:0c:e3:8c:3e:cc:74:d1:37:3e:1d:97:17:3f:d6:
                    b5:4f:95:04:75:ae:14:8d:63:17:bc:55:fb:e6:ba:
                    71:14:8e:ca:1e:c6:fc:01:43:a2:d8:70:b4:07:06:
                    c3:01:cd:65:12:c6:3f:1b:5b:21:99:8e:44:19:9f:
                    2a:52:50:af:76:63:88:df:13:16:be:e8:70:75:91:
                    14:bb:81:68:27:c3:15:aa:9b:dc:18:95:65:4f:a2:
                    a3:ed:28:25:7e:25:57:bd:b5:f7:6f:62:c4:b9:96:
                    bd:7b:9a:e7:83:33:4e:c4:b3:bb:e5:2e:dd:30:56:
                    e9:df:1b:22:10:01:af:ec:3b:30:f7:a2:cb:ab:14:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:19:53:66:17:10:BB:04:B2:37:8D:CA:77:05:0B:99:87:76:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.128.0/21
                  104.219.20.0/22
                  162.212.96.0/22
                  199.30.104.0/22
                  199.102.56.0/22
                IPv6:
                  2607:2a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:56:d4:09:84:6d:e6:13:40:cb:b0:ce:3d:e0:03:ee:34:cd:
         a4:9c:e7:5a:91:a7:4d:ec:1e:97:77:eb:84:67:2b:54:dc:b1:
         67:d3:6c:4d:67:d4:51:ce:36:19:12:34:28:bb:58:90:3a:6c:
         da:b1:2d:88:0d:bf:ad:eb:6b:78:af:8a:64:c9:d0:21:62:5c:
         f5:fe:c1:64:7c:75:9d:22:98:d1:c2:b0:33:ec:8b:d8:ca:79:
         29:cc:03:2b:99:61:c2:99:a3:18:a6:01:30:44:36:ce:bf:a0:
         0f:54:85:15:fa:69:f9:81:ea:69:15:3e:3f:f7:a9:ad:45:39:
         c1:c2:92:f5:3d:ae:85:ef:a6:51:0b:36:28:7e:30:36:8b:60:
         03:34:4a:87:36:07:4f:7b:70:75:f4:68:7d:7f:16:78:cc:df:
         13:e2:2a:af:5e:2d:c3:aa:3c:13:3d:ee:e1:e3:a2:6e:ee:02:
         42:8e:82:ee:a3:d6:f3:d2:58:67:b9:bf:d8:a8:60:4a:d3:d7:
         f8:dc:8c:3a:ed:2c:11:c3:ff:0c:e8:a8:4e:bc:50:c7:12:8c:
         2d:6a:b6:e4:3b:b4:1c:34:23:16:a2:9c:40:f2:18:c6:ee:3e:
         8b:6e:90:d0:2c:a7:88:b1:2a:80:53:aa:98:de:39:8c:73:03:
         6a:ac:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:05 2024 by rpki-client on console-fra.rpki-client.org