Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abae50a3-b4e6-30ed-be9f-4cf339022baa.roa
File:                     abae50a3-b4e6-30ed-be9f-4cf339022baa.roa (raw, json)
Hash identifier:          C5DLRWVvtZwFwu7lWJvrXGQFUXrRx3Z2CmQoDYvdgLs=
Subject key identifier:   88:C3:3F:9B:47:19:4D:5C:BC:13:83:0B:09:94:F8:14:CF:DA:E7:4A
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583E9BB5E56FD838BC78F1F2EC80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abae50a3-b4e6-30ed-be9f-4cf339022baa.roa
Signing time:             Sun 17 Jul 2022 12:00:00 +0000
ROA not before:           Sun 17 Jul 2022 12:00:00 +0000
ROA not after:            Mon 10 Jul 2028 04:00:00 +0000
asID:                     19905
IP address blocks:        170.0.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9b:b5:e5:6f:d8:38:bc:78:f1:f2:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 17 12:00:00 2022 GMT
            Not After : Jul 10 04:00:00 2028 GMT
        Subject: CN=8ec323ec-27b8-4176-a141-add0896369e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:08:b6:7f:39:41:5d:fd:59:af:7e:89:95:
                    04:44:d5:c8:f5:7c:56:e6:72:23:06:a3:70:90:8e:
                    d8:3e:c0:2f:d2:a4:cb:19:e3:08:23:be:c4:42:1a:
                    ce:d4:09:97:cb:3b:01:46:7d:da:be:ae:0f:1c:02:
                    ca:b6:0e:68:be:19:e8:9d:eb:9f:c0:cd:bb:e2:b0:
                    18:aa:88:d8:02:b3:4a:1f:3e:31:08:6a:8a:64:eb:
                    8b:6d:5c:59:59:f0:49:34:46:05:17:b9:19:4f:4a:
                    5c:e7:27:84:b9:bb:4c:97:e2:12:63:84:95:83:5e:
                    9a:48:21:97:58:ba:38:ff:7e:3c:07:ff:92:41:4d:
                    da:f2:c1:4a:0f:91:36:5e:b5:0f:9f:01:72:1f:fa:
                    ab:fe:07:cb:a1:fa:d0:9f:71:28:08:59:4b:23:c5:
                    e0:c6:c0:ec:57:ed:ca:a0:0b:2d:52:8d:40:e7:94:
                    f9:2a:71:86:8f:8c:91:16:23:ae:b0:f2:1a:ed:ce:
                    44:44:23:9a:03:02:e5:4c:ed:25:14:db:98:cc:73:
                    40:b1:0e:b6:9e:29:3e:28:c5:22:90:68:27:a9:71:
                    b8:22:59:dc:c8:f5:19:21:d4:aa:4b:ec:28:ea:d2:
                    07:7c:b2:8e:c6:4b:23:b8:1f:94:dc:5b:e8:6d:07:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:3F:9B:47:19:4D:5C:BC:13:83:0B:09:94:F8:14:CF:DA:E7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abae50a3-b4e6-30ed-be9f-4cf339022baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:4c:95:b9:d7:dc:99:a7:12:0f:48:be:00:3d:d2:f6:a0:
         fc:cf:cc:12:4b:64:c3:96:83:d2:56:f9:e1:81:65:fc:cc:bc:
         f7:fc:df:eb:0e:27:a4:e2:59:99:13:a0:cb:b5:94:c7:2a:8e:
         ed:e2:ea:f0:6c:43:7c:1a:23:af:c2:3c:ec:3f:65:f9:d3:53:
         ce:d1:e1:b0:c3:8b:a5:b9:7e:d9:21:3c:6c:1c:46:f0:70:99:
         59:b7:69:c2:b3:3c:31:a7:b2:df:64:56:13:24:c7:c6:92:eb:
         96:ca:4b:d2:5b:0c:ed:20:ab:dc:60:40:e5:85:c0:03:7b:ee:
         be:9f:48:4f:32:5e:85:46:f7:ff:df:46:9b:0e:fd:00:ec:75:
         db:03:30:ae:66:7b:5a:5e:1a:07:d6:e0:7d:bc:28:e2:fa:ab:
         b1:19:9f:9f:af:87:32:c2:0c:36:89:37:d9:b8:22:f3:7f:33:
         53:7c:5b:91:9f:36:02:b8:27:3c:56:10:d5:8b:0f:76:7d:16:
         52:2d:87:78:5c:09:1a:38:db:2f:b6:56:d7:60:d2:4b:d4:3e:
         71:58:ee:e4:31:dc:03:e7:7b:cd:8c:9f:c6:4e:40:45:af:4a:
         cb:8a:ce:18:16:e5:85:82:0b:f3:a9:29:16:7a:eb:75:ad:64:
         2a:9f:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:35 2024 by rpki-client on console-ams.rpki-client.org