Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa
File:                     b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa (raw, json)
Hash identifier:          LHcxfuRcCd2XKADSVnE3jIFHGCadLxYvTMnixUQv2fo=
Subject key identifier:   D9:A3:C2:A4:44:BC:EF:0D:8C:16:23:0E:C0:FD:68:7C:3D:D3:6F:A4
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285844EC05474D8B4F126B66FF4800
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     20055
IP address blocks:        209.188.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:47:4d:8b:4f:12:6b:66:ff:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=41aa6e9d-db6d-4efc-a86b-c58c8c9a9199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:c3:e3:71:3f:3d:a4:87:6c:9b:c5:94:47:
                    3b:5c:55:be:09:08:ae:f7:43:6d:d3:8c:70:98:9c:
                    fc:93:be:c9:0e:62:79:e6:d6:82:65:3f:c3:51:dc:
                    14:1c:a1:98:9a:f2:3b:5b:fd:a6:9c:d1:94:db:4b:
                    61:81:ca:48:ab:37:d6:eb:89:cd:71:16:bb:43:25:
                    00:1b:12:64:b0:8f:88:30:6e:5c:93:e9:cf:95:04:
                    ad:b0:d0:c1:8a:5b:05:37:ad:4d:a5:7d:70:27:fb:
                    35:c2:69:54:5e:b9:4e:3f:27:9f:4a:e0:19:e9:32:
                    f6:9b:fb:da:a4:c4:1d:db:64:07:05:cc:53:31:3f:
                    f1:4e:b6:23:3e:57:dd:42:d7:0f:f7:7d:46:1a:9f:
                    58:af:e8:e6:ae:ab:d4:ee:fb:ce:63:75:9a:fb:f3:
                    89:57:6c:f5:eb:37:1e:22:eb:b4:78:45:a2:85:e4:
                    08:0c:fa:fc:2d:9c:cc:42:be:c1:90:d9:50:d6:93:
                    f8:a6:90:5e:4d:db:22:a1:a0:67:5d:ec:59:82:79:
                    58:b7:35:94:22:1a:82:d2:d3:0c:aa:63:ea:9b:e6:
                    d7:44:c5:67:94:04:9c:44:c4:6b:03:5a:1d:c9:b7:
                    be:f8:59:30:f5:2c:92:eb:18:f8:3c:f6:ab:a4:c5:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:C2:A4:44:BC:EF:0D:8C:16:23:0E:C0:FD:68:7C:3D:D3:6F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:72:d0:c9:86:c7:bd:fd:f3:d2:ff:ff:d3:c0:d6:12:1e:
         40:e7:b2:2b:b3:2c:e1:69:40:ff:5e:ce:e4:c5:a7:86:e4:9c:
         bf:10:e9:56:73:39:be:ae:d1:c5:7d:4b:a8:89:46:cd:81:f3:
         90:d7:2c:19:2e:ae:88:78:02:3d:b2:29:83:d8:af:11:4c:4e:
         94:dc:89:85:d2:db:08:b6:dd:e1:e6:d1:10:c2:d9:5c:c5:ba:
         da:47:66:9b:60:16:71:e9:ec:69:0f:c9:b5:13:b7:df:04:70:
         d8:00:7e:83:75:67:ba:5e:81:85:83:20:be:7b:16:b0:47:30:
         c1:71:f3:66:7f:2e:9c:e9:1d:5f:90:8c:36:9d:76:8d:83:ab:
         fc:f7:c8:39:16:19:49:19:91:83:c1:ae:9a:4f:13:db:77:c1:
         99:c0:87:69:dd:cc:aa:62:f8:67:73:62:84:ab:ee:40:2a:79:
         a7:74:c8:78:de:d8:8b:64:5a:69:66:e3:c7:07:16:8f:14:cf:
         f2:3a:22:57:eb:a4:e4:f5:c5:34:c0:95:eb:4e:5d:d8:0b:4a:
         6d:3d:5e:60:18:77:b5:ba:25:7e:5d:30:2f:38:1a:dd:d3:3f:
         1a:a0:dd:16:af:b6:89:10:0f:1f:d0:3f:9a:86:82:42:51:cf:
         fc:3a:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:37 2024 by rpki-client on console-ams.rpki-client.org