Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
File:                     f18517cc-6da9-30ab-8184-12b511ccaa4c.roa (raw, json)
Hash identifier:          b9CYGf7GG4zE9OLd+CVEVbHLL0j52ftlDDLpnpHfkuM=
Subject key identifier:   A6:BC:D2:91:19:9F:2F:AB:56:11:96:FE:AE:77:B0:78:3A:28:14:1E
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F432858457FDDD0CF5FE495FCDA5FA400
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     30698
IP address blocks:        209.221.248.0/22 maxlen: 24
                          209.221.240.0/21 maxlen: 24
                          209.221.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d0:cf:5f:e4:95:fc:da:5f:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=afe32c42-fecd-4773-9761-32465b5e6e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:44:74:d0:38:19:7f:bb:38:22:d0:d7:1c:
                    8f:65:d2:40:58:60:88:54:d7:8b:73:bf:2c:2e:f8:
                    d9:ad:0b:e5:8b:2f:f7:54:d2:ed:89:d7:d5:47:4f:
                    25:8d:c9:9d:b6:52:9e:20:44:f4:0c:e5:3c:1a:65:
                    86:aa:8a:7f:1c:94:f9:b5:55:1b:c5:9c:36:99:12:
                    4e:9f:77:d2:d1:2a:47:7e:ae:46:59:1f:05:d7:d8:
                    c2:c6:d3:e5:c0:6e:30:8e:68:86:25:1f:0d:31:59:
                    f0:3c:f5:f6:cc:ca:72:95:bc:1d:70:10:f1:8c:63:
                    98:0f:45:ec:48:1f:c3:86:cf:54:7e:00:9d:97:b9:
                    82:de:7f:18:2c:b1:cf:18:c8:d1:c0:3c:bd:56:76:
                    67:9d:62:42:2d:74:d8:92:06:e3:fc:1d:1f:80:d1:
                    10:b9:18:d2:ca:a5:dc:dd:cc:af:32:04:ad:3d:fe:
                    20:0c:ac:d5:db:5d:30:a1:df:c2:de:ec:63:c0:d2:
                    80:44:c4:88:6c:4c:b9:d0:31:d9:19:a9:ed:83:38:
                    63:af:96:3e:50:9c:20:1d:59:40:9c:1c:96:39:70:
                    4d:07:e9:19:5c:d9:5c:e4:7c:a7:74:6e:e0:0d:a2:
                    ca:fe:2a:d3:27:cf:5e:7b:c3:a7:ab:f1:d4:0b:0e:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:D2:91:19:9F:2F:AB:56:11:96:FE:AE:77:B0:78:3A:28:14:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0-209.221.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:42:15:99:3f:21:a9:cf:a6:f1:3b:70:c3:97:1a:b2:70:
         ec:ee:e6:b1:ae:af:1b:cd:bc:11:41:23:13:a8:b2:25:c2:8b:
         af:21:d0:fd:5c:91:bd:99:f7:27:7a:ab:d7:d2:80:7a:8e:0f:
         e5:36:69:4b:a7:f1:2b:2d:15:62:2e:78:a2:23:29:7b:82:77:
         12:85:43:e3:2b:4b:8f:9f:b0:4b:a4:e9:59:3d:39:1a:64:cf:
         af:2d:c6:5f:14:40:91:00:48:fd:71:80:10:05:ed:18:a2:d8:
         3e:50:5e:8a:aa:0b:31:35:5d:be:f4:a9:e6:01:89:0e:6f:c1:
         0c:42:b5:51:aa:05:0c:cb:27:67:ec:5f:78:93:5e:ba:77:3b:
         f3:b4:5c:ed:52:be:a0:58:65:9a:4b:cb:9c:6f:ac:76:30:42:
         37:b1:0a:fc:79:23:a9:ef:f6:01:40:e2:10:66:72:e6:2a:14:
         80:2c:b0:d3:4f:98:73:5e:ec:01:6f:2e:81:30:f5:a0:00:b8:
         89:7c:f9:5a:1f:ae:c8:16:f2:f1:c0:d8:72:af:60:f2:c3:d6:
         eb:af:e5:73:a6:39:23:c4:1b:28:e6:64:41:3b:e2:f6:7f:62:
         78:73:6d:fb:76:5b:e9:04:9b:db:4b:0e:73:75:5f:a9:3c:f2:
         ad:73:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:22:02 2024 by rpki-client on console-ams.rpki-client.org