Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa
File:                     5d953e84-6058-3e49-b735-9358964a36ad.roa (raw, json)
Hash identifier:          h6+0LI1tc5H213m2m1lEZFIDNhc8phrRfN3T3leUsuk=
Subject key identifier:   16:2C:D5:C3:32:DE:6C:CB:42:7A:CE:92:8A:71:AE:B7:17:95:5C:E5
Certificate issuer:       /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial:       010D0C9F432858456128557DFBE8722F846DBE40
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     62827
IP address blocks:        198.96.5.0/24 maxlen: 24
                          2620:7f:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:55:7d:fb:e8:72:2f:84:6d:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=83785a80-b516-4faf-b0b3-7dc341fdc321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:f2:7d:0d:db:e9:f4:76:e7:f6:14:a0:9e:
                    02:1b:94:ad:4e:cd:ab:29:1a:37:62:79:9d:40:e2:
                    01:46:a8:ab:0a:a5:50:c0:77:ae:66:ad:90:53:9f:
                    9c:c5:be:60:ff:48:5b:ef:91:66:8f:2e:9c:30:2f:
                    3d:1d:e9:74:af:0d:a0:8d:b8:3a:da:35:0e:bc:31:
                    35:4a:1b:c4:49:cf:d0:a7:59:ac:81:86:76:ca:29:
                    c3:61:6e:1e:06:55:c0:67:9d:07:5a:8f:df:64:0f:
                    b2:db:d5:64:34:2f:22:14:16:cc:8f:c3:3a:86:46:
                    a5:de:55:7c:76:f0:46:ca:c9:5f:f8:00:7d:30:f2:
                    29:32:0b:d4:43:1d:b9:04:e6:a6:9f:76:28:9d:13:
                    14:73:21:ef:36:0b:b9:15:65:ef:22:88:e8:15:cd:
                    b3:8c:42:91:d4:22:b4:08:2c:9f:c8:cf:3d:30:4d:
                    6d:43:32:2a:07:92:2e:a8:b6:09:bc:a3:cf:67:35:
                    68:43:c3:c0:12:af:71:05:11:ec:30:34:bb:b8:0d:
                    1a:e6:41:94:31:2d:e5:f1:86:81:34:73:27:68:a8:
                    2e:cb:64:68:2c:30:8e:0d:6b:9b:f2:ef:f2:2e:3c:
                    10:7f:11:82:8a:ac:0c:36:da:73:9b:63:13:37:c4:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:D5:C3:32:DE:6C:CB:42:7A:CE:92:8A:71:AE:B7:17:95:5C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl

            X509v3 Authority Key Identifier:
                keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.5.0/24
                IPv6:
                  2620:7f:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:68:73:23:34:14:d2:b1:79:cf:ed:59:4a:91:3d:9a:15:
         c5:d2:46:50:3b:da:e7:69:77:00:de:47:71:55:54:a5:0b:09:
         fe:be:ea:21:2f:78:2b:da:4a:4f:89:40:5b:db:52:86:11:ce:
         fb:76:47:53:f4:9f:8a:bc:e6:27:f1:2d:85:97:d8:60:9d:34:
         0e:d3:b4:b4:c3:06:f7:d2:ae:50:9f:84:d3:70:93:d3:70:60:
         b9:eb:8d:7c:a5:c7:db:40:1f:2c:47:51:ad:b3:29:1e:e5:42:
         10:b7:59:28:6e:84:47:7b:7b:29:38:8f:f2:42:81:f0:68:73:
         30:7c:a9:10:3d:97:7c:0d:04:82:36:1e:59:f9:fa:8c:6f:fd:
         12:1c:1c:9c:ce:88:4e:aa:2e:3f:dc:ba:fc:dc:12:f5:ec:3d:
         9a:85:49:ed:5c:a8:51:44:6d:9a:51:77:ec:d2:03:fa:02:9a:
         ff:cc:df:0f:0b:d3:3e:70:11:c6:8c:19:c4:bd:3f:cb:fb:3f:
         4a:d6:60:9d:a7:c8:b4:72:2f:dd:0b:4b:e2:a6:91:70:8e:42:
         4b:44:c4:d2:53:27:fa:45:e9:85:ac:bc:93:e1:b6:3b:78:10:
         b0:6a:cf:0d:7b:17:c2:58:29:f4:05:af:12:5e:a8:2b:42:10:
         e2:9e:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:38 2024 by rpki-client on console-ams.rpki-client.org