Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa
File:                     8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa (raw, json)
Hash identifier:          DzwOCV26pgwe6fDcWTwaaBXMQ/b1q2auj2JJY2Ep/JI=
Subject key identifier:   73:AD:E6:D9:F6:14:63:61:63:70:05:4F:57:F7:BB:F9:9B:82:B7:69
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F43285845734DB2D7E399FEBE6C0FD180
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     62537
IP address blocks:        162.222.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:d7:e3:99:fe:be:6c:0f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=b6607049-afd4-4f6f-b521-5f1e981ba773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:5c:be:fe:9b:16:ad:08:a1:35:3b:7a:60:
                    d4:b0:e2:ad:81:e4:bd:04:91:06:08:69:15:20:89:
                    1b:75:6e:56:c0:aa:e2:41:03:a9:5b:10:8f:db:c3:
                    ab:ed:6f:48:91:56:28:0c:13:a7:d4:b4:71:a1:fc:
                    90:a8:8e:8d:ad:81:45:6e:87:f3:15:8f:02:84:8b:
                    7c:62:bf:0c:07:19:40:7e:f5:0b:a2:1f:a9:f5:c2:
                    68:73:d6:35:07:c8:53:df:d6:60:5c:e7:9e:15:ae:
                    54:28:b0:ad:10:bc:8c:ad:54:2b:cc:8b:0f:27:9d:
                    96:7e:66:aa:10:ae:40:2e:03:2c:cb:8d:e1:44:78:
                    e0:d9:07:63:25:2a:5e:20:64:cb:43:1b:49:02:10:
                    88:f8:ff:76:f6:a3:37:b7:5b:76:bc:82:84:56:af:
                    5a:6f:23:41:7c:3e:9b:da:7c:48:09:58:1e:be:8b:
                    47:1d:e7:ba:7c:a2:5e:68:75:ca:81:24:ec:4c:36:
                    71:56:97:11:a6:80:40:ed:49:0e:10:bf:0b:9d:82:
                    53:c2:1e:f1:34:0c:75:46:70:aa:26:17:58:98:a0:
                    d5:4b:94:a5:5f:5f:25:0b:cf:2d:76:f6:77:36:ad:
                    82:f7:ba:05:21:83:03:25:07:94:3f:fa:83:aa:d3:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:E6:D9:F6:14:63:61:63:70:05:4F:57:F7:BB:F9:9B:82:B7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:77:f0:9f:df:6c:71:5f:5f:10:ad:18:2d:04:26:b2:75:
         fd:b6:77:1f:3b:88:78:f4:ff:c8:af:3d:d0:c7:d3:10:89:99:
         80:09:30:b1:c7:fc:6a:6e:3f:e6:af:3c:7e:90:9c:42:59:dd:
         14:cb:53:c5:93:65:3c:1e:d2:79:80:fe:f5:ec:42:7c:59:2b:
         70:11:99:5a:34:3f:43:d9:62:46:46:b5:ff:12:1b:0e:f6:13:
         a5:90:1d:59:91:85:fe:46:30:13:9a:41:66:97:08:ef:f1:f8:
         60:da:95:a2:35:60:aa:fd:ce:d9:01:94:b8:41:da:dd:7f:e0:
         9c:de:54:83:eb:ec:29:08:f6:83:9f:11:4b:94:d3:10:48:82:
         ef:49:e1:d2:ff:c6:18:2e:ae:b6:e2:e7:f4:c8:fe:9f:e6:17:
         c6:2d:f7:a4:0c:04:54:10:58:b7:3f:c0:39:15:fb:58:02:31:
         4c:9a:db:07:a0:50:c1:11:28:4b:ce:b1:e0:a0:0c:9e:30:f0:
         27:e4:40:d8:73:ac:9c:43:31:46:6a:d9:9b:5c:38:17:45:a3:
         87:61:1b:7d:ef:d4:fa:77:7b:32:0e:7e:67:fc:63:de:00:16:
         73:04:3e:c9:8c:85:21:97:f7:a1:3b:25:76:b4:b0:0f:c9:19:
         c7:e2:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:30:55 2024 by rpki-client on console-ams.rpki-client.org