Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa
File:                     9cb3074b-5613-3410-ae02-49c4a3ccba88.roa (raw, json)
Hash identifier:          E7u1uv/tVGriMux45gLJxXYvdfVqybkMBivmnud0VXg=
Subject key identifier:   91:B6:5F:17:41:60:C5:BC:17:5A:46:0A:5B:E6:1F:D9:E9:A1:01:68
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584598FDF7F1D4E962690014CC40
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        206.201.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f7:f1:d4:e9:62:69:00:14:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=a5669e3e-9347-4cbb-8c34-3ffa10dc6d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:84:b6:c9:b5:ed:9b:dc:67:08:c7:f8:03:
                    2c:f0:7d:d7:4a:37:3b:76:e3:ac:5f:73:12:c8:45:
                    cc:7f:40:78:65:38:17:5a:51:f0:cd:8b:33:f1:78:
                    b8:49:fd:f3:92:d4:d6:99:8f:e8:2c:be:13:00:7a:
                    95:c8:6b:da:0f:55:90:88:46:9e:1c:67:57:b9:40:
                    80:65:e0:fe:f5:6d:9a:ab:77:9b:96:17:89:a5:3d:
                    ca:6a:de:67:d4:a0:66:f8:84:22:16:43:c6:af:6d:
                    8c:a3:8d:45:5a:d1:d8:73:77:ae:5e:f0:63:df:29:
                    5d:6f:54:58:4b:9d:f1:71:41:f0:46:f6:36:ff:92:
                    cd:e0:47:55:a6:66:c8:3a:69:9b:1f:d9:d5:c2:38:
                    f2:89:ef:83:b4:01:79:66:fd:6f:38:38:7b:25:1c:
                    a9:2a:53:d9:29:19:b9:6f:5a:1e:5d:62:99:e2:cb:
                    38:be:35:ac:47:e0:2c:14:32:b8:8d:ca:81:38:8b:
                    ea:68:06:fe:0f:4c:9d:f4:19:77:d5:7a:c7:5d:90:
                    18:1c:ef:f9:0b:71:2b:f7:23:76:32:14:11:b3:75:
                    94:f5:33:ca:29:5e:8e:5d:12:e7:5f:87:e0:e1:1f:
                    56:6f:b8:af:d8:96:ba:a9:7b:3c:96:5d:ba:e5:4c:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:5F:17:41:60:C5:BC:17:5A:46:0A:5B:E6:1F:D9:E9:A1:01:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:28:4d:e8:2c:a1:c2:0f:58:97:5b:bb:60:24:f7:9f:96:54:
         7f:23:b4:a4:2d:d0:f7:78:93:6d:fc:a3:79:bc:ea:31:19:df:
         82:00:59:d2:69:4b:d2:04:a6:60:68:a6:d4:5a:89:bf:1f:a3:
         d7:c7:76:29:98:09:16:af:5f:44:46:be:59:1d:61:26:37:18:
         cf:b5:36:16:6a:b5:eb:31:4b:56:c5:8a:bb:61:23:57:99:e3:
         e8:f0:5e:ef:e5:a7:6a:78:94:75:2d:75:19:cf:cf:0b:cf:1c:
         b5:e1:66:0a:7b:c6:42:ea:66:5d:2a:52:12:df:a6:66:4c:a4:
         12:c3:ec:91:51:03:a9:98:2c:d6:fa:33:21:32:d0:8a:43:36:
         f0:6b:9c:16:58:6b:e5:ab:aa:5d:09:38:12:02:77:1e:03:2c:
         78:62:1b:e5:ba:73:5a:41:f3:fa:ac:ba:25:df:22:c2:bc:6d:
         b4:49:b4:25:a7:87:fc:85:2c:95:b1:c1:61:08:6a:06:4e:ea:
         69:d7:39:79:ea:cd:fb:57:5e:96:c1:97:dc:96:30:83:ed:b7:
         74:89:18:2d:bb:06:f2:95:02:83:06:8e:78:c5:ae:c8:52:33:
         ad:ef:32:52:2b:32:55:f5:d8:0b:57:f3:c9:82:32:73:10:b9:
         71:cc:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:43:59 2024 by rpki-client on console-fra.rpki-client.org