Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
File:                     70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa (raw, json)
Hash identifier:          pqjRbGwS8xtVwy0Z/X2LiYJB2UHBgGEtmLe3JdrltCU=
Subject key identifier:   99:38:C8:92:04:BB:AA:D1:C4:B7:7D:7A:10:2D:54:49:90:9D:04:83
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285845840DC9BD5C416EC7DC5A4940
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     11269
IP address blocks:        199.193.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c9:bd:5c:41:6e:c7:dc:5a:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=38860e86-332c-43ae-916f-a639cd073dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:95:b7:5b:26:dc:85:dd:c0:d0:48:d6:0f:
                    1e:e4:0d:3c:0c:0a:4a:38:38:5d:b1:d6:2e:df:73:
                    dd:8e:15:99:cb:07:4f:90:b2:a2:5c:a6:e9:42:77:
                    36:7c:ee:84:06:fa:60:9b:b2:4c:5b:66:8a:37:63:
                    54:39:30:53:16:d6:ed:c7:fd:cb:59:37:ce:06:da:
                    84:a3:bc:bb:b7:aa:41:a2:b5:80:b6:7d:9a:11:5d:
                    eb:d6:e1:d6:08:b1:90:ce:b7:01:a0:d4:d8:ba:21:
                    fc:c6:cc:ea:06:71:8b:c3:05:17:4e:15:f0:6d:69:
                    a3:ed:0c:03:71:24:d7:a9:45:4c:da:3b:e8:1b:65:
                    f3:81:e6:72:c8:74:4a:10:d3:c2:b8:95:40:0a:a8:
                    30:0c:33:c8:e1:9e:d6:36:e2:39:2a:5e:3c:21:d1:
                    f7:1e:7d:08:34:44:77:c4:b8:57:2f:a3:2a:64:54:
                    9a:59:a0:20:82:c9:99:b8:b1:32:c5:45:58:1f:ed:
                    6e:24:63:fe:dc:e2:4e:5e:e9:75:82:4d:7a:49:25:
                    c0:f7:eb:f0:14:0e:17:d0:6b:43:a5:42:00:a1:be:
                    53:d3:f6:15:03:fe:99:97:02:72:0f:4d:15:58:1c:
                    44:13:36:91:bd:db:26:09:bf:8f:bf:c8:a6:54:26:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:C8:92:04:BB:AA:D1:C4:B7:7D:7A:10:2D:54:49:90:9D:04:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:bc:ac:48:65:15:e7:2f:f9:97:68:3a:55:1d:ff:2d:e8:
         3b:f6:23:4b:39:90:0e:f1:52:1d:91:83:33:f2:8b:61:35:72:
         7e:53:17:3c:76:20:70:78:e4:99:81:e3:72:19:1c:ed:42:33:
         58:b8:99:67:44:21:e4:8e:89:34:c8:6c:17:2c:09:96:2a:ff:
         fe:78:99:30:7b:99:4d:83:b5:94:bd:08:85:f5:0b:b8:aa:53:
         86:67:e3:49:d0:13:95:ee:fd:d4:dd:cb:37:2e:7e:2d:ef:00:
         b6:eb:b5:90:6e:57:ad:da:79:8d:eb:c0:64:10:6f:1f:a2:e2:
         a0:f8:a5:28:c7:53:6c:6c:72:55:04:4a:fd:9a:3a:26:33:d7:
         98:9b:3e:dc:01:4b:8a:7b:52:83:45:90:b0:1e:44:40:5f:1f:
         6a:06:1b:63:51:66:73:67:ca:ae:d3:37:41:00:bd:71:4c:cf:
         5a:b2:3f:d4:c2:9f:1e:ea:87:1b:cd:1b:75:ab:e7:85:66:3a:
         47:c9:e3:2a:98:e2:08:c5:19:42:7c:d6:fa:a1:23:cd:e1:d3:
         49:ae:4a:44:99:68:3c:e1:2f:c6:ab:b4:22:41:82:f5:68:9d:
         c0:24:68:6d:91:97:91:a5:88:3e:7a:22:42:0b:7a:d6:9d:fe:
         d4:f6:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:35 2024 by rpki-client on console-ams.rpki-client.org