Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          qZPDJBuPfWmaVdpfkYBfVzdvfXjgAPHBesY3d4zilbM=
Subject key identifier:   DB:3E:AE:0C:89:DA:11:72:2E:4A:D6:E8:46:2B:AA:F0:33:28:3D:2C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2CA52A17C2BF419CD4980
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ca:52:a1:7c:2b:f4:19:cd:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=0a6dcc73-3b6c-4283-984e-e0904e7e70bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:c0:49:68:4e:c2:ad:ff:36:11:f4:9e:a2:
                    60:55:1c:16:9e:07:95:2e:19:ed:8e:56:f4:0d:52:
                    22:cc:a0:11:95:b0:c4:40:90:ad:ae:27:14:17:d4:
                    13:e6:c3:b1:cd:ce:fc:cd:73:ed:a6:15:f7:b9:5a:
                    03:33:fd:82:fb:f6:f5:95:ac:9f:ba:34:d0:5a:60:
                    df:bb:a8:c2:de:ee:0c:1e:10:5a:ae:4d:a2:a7:b4:
                    c9:dc:75:e2:d3:2c:76:63:88:e1:c2:bb:43:8b:d5:
                    16:01:26:6d:29:8e:7e:dc:83:12:50:6c:36:c5:01:
                    27:11:c1:8b:44:7e:3d:f1:6d:5d:fe:7e:28:0c:8d:
                    17:5a:e5:03:27:ae:d6:59:85:ff:5a:99:d6:2c:0c:
                    bf:c5:54:e6:48:14:9c:fa:2d:31:73:6e:0c:97:45:
                    51:5e:66:86:c5:93:c0:56:d0:12:5e:43:c9:f8:ad:
                    d2:5b:59:13:16:81:9f:27:54:41:63:7e:07:31:9e:
                    06:7d:bc:1b:0b:d3:ab:87:37:73:b7:3e:6d:b4:8b:
                    7a:7a:cf:b2:06:00:6d:54:99:71:d7:9f:e0:1e:86:
                    e9:17:4b:c5:5e:d7:72:32:ed:4c:d1:19:a9:88:65:
                    4c:38:d0:d3:72:ba:66:b3:a9:8f:1d:b7:9d:98:4b:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3E:AE:0C:89:DA:11:72:2E:4A:D6:E8:46:2B:AA:F0:33:28:3D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:b1:70:59:82:66:40:f4:8a:b6:14:19:60:7c:f7:92:8b:
         35:83:3f:c6:e9:77:68:f3:b4:06:5f:6c:11:8f:bb:80:1b:23:
         a4:06:13:73:e8:77:5b:bc:90:5e:4b:1c:26:9a:4d:03:06:e7:
         0c:fe:13:cb:c5:cf:f2:61:d2:dd:2f:1b:fa:ca:f4:d3:c3:01:
         bb:4c:ba:c5:1f:04:dd:e7:f9:24:80:eb:f1:d3:8b:56:df:c7:
         3c:70:f6:63:2a:6e:ab:cc:31:a4:d5:99:58:52:6a:b7:a7:e7:
         7b:76:4d:fc:01:a5:02:20:b8:85:f4:19:77:dd:62:cb:f5:3b:
         08:35:3b:25:ac:8f:83:8d:84:48:83:37:5a:e0:f7:f3:1d:39:
         5c:b0:f7:89:d7:0b:73:79:ff:3f:cd:44:b8:96:7d:b1:99:99:
         3c:26:a3:16:38:bb:49:bc:35:92:a4:fa:20:da:19:b0:a9:06:
         8d:c2:58:8d:9a:6d:79:bd:bb:70:67:38:29:fb:e2:3f:a2:ef:
         a0:e4:af:0d:44:24:33:68:db:15:e8:a4:a8:5a:04:92:87:85:
         bc:54:84:a8:26:58:8b:b7:03:c6:67:24:2e:34:5f:39:93:fe:
         72:50:b9:c4:d1:9b:4b:90:b4:94:93:08:83:e8:bf:5e:b3:75:
         5b:4f:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:35 2024 by rpki-client on console-ams.rpki-client.org