Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
File:                     6ad53a49-6abe-3d44-806f-3164436f3834.roa (raw, json)
Hash identifier:          fcYlBnO+Plh53u5VG901db8qrHrv4dIf/EzJ5OV2afg=
Subject key identifier:   11:A6:6E:51:97:0F:88:D8:27:1A:F4:EC:30:A4:FE:57:9D:59:93:AF
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584596334C38FF35C535EC154500
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     33182
IP address blocks:        72.29.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:4c:38:ff:35:c5:35:ec:15:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=a0030c4c-106a-4771-8664-8508c6b8162a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:88:84:b4:b0:4d:e3:60:d6:e4:50:43:1e:a0:
                    24:70:0d:1b:ab:33:9e:53:99:18:00:c7:25:03:ca:
                    5f:81:0a:e0:87:34:5c:4c:ed:de:bc:7e:56:7c:95:
                    13:47:78:a1:7e:f2:30:a9:2d:ea:f3:06:1f:f3:ae:
                    a5:10:0a:2a:55:94:ee:87:d5:92:ba:44:1c:71:17:
                    fc:71:a3:b9:06:14:0a:b5:64:5e:2c:79:fd:27:9e:
                    08:c8:58:6a:af:9e:ed:31:41:c0:85:a0:8b:02:3d:
                    61:8b:cb:05:6b:e1:99:1e:01:4f:30:d4:e5:60:36:
                    12:82:18:95:19:0b:3e:15:eb:24:1b:67:6c:97:ff:
                    87:9f:e2:6d:16:42:3b:9c:04:11:6a:25:ff:e4:29:
                    94:4d:19:31:35:75:74:3f:0a:5e:01:6f:3a:19:95:
                    33:27:06:d7:da:90:58:00:f4:2e:8b:3d:52:4c:3c:
                    e0:8f:90:7d:a2:0a:a1:30:78:a8:1d:c8:c4:49:ae:
                    0d:0d:e0:1c:df:34:58:d8:ea:e2:e6:0b:cc:32:b1:
                    06:85:d3:32:d6:3d:7c:88:6b:50:fa:d1:d1:ca:cd:
                    13:29:6c:cb:47:0b:9d:6a:cf:39:7a:cf:d4:82:4d:
                    b4:f5:a5:e8:36:70:d4:4d:7d:cf:d6:67:52:be:a3:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:6E:51:97:0F:88:D8:27:1A:F4:EC:30:A4:FE:57:9D:59:93:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:5f:39:b7:eb:1d:c3:5d:01:55:c3:73:d2:ff:a5:d4:ab:
         bb:8b:b2:97:9a:eb:e9:79:da:7c:57:e3:12:b6:a7:21:5b:2d:
         fc:91:ad:29:3b:22:4d:d7:97:08:0d:a8:71:5c:e7:10:00:2f:
         45:13:8c:cb:0f:d6:de:05:3a:13:71:42:d4:c0:fa:53:2e:32:
         ac:aa:ab:3b:7b:02:16:bd:41:17:3f:6b:ad:ab:f9:82:c6:d7:
         a3:28:ea:be:40:9a:48:69:b7:c7:99:b7:f2:74:04:82:c9:b4:
         be:da:67:8d:e7:b5:68:e9:6f:56:c9:b1:99:03:ab:e0:b9:8e:
         f4:45:2c:4b:d3:c4:47:a0:11:b4:5d:d3:df:fd:a6:a5:af:b3:
         20:8f:fa:75:d5:bc:2f:5e:f5:0f:72:c5:10:1f:55:2b:f3:51:
         33:68:57:95:0c:51:7a:87:41:8c:c3:42:3e:1f:98:6b:1a:f4:
         9e:01:cf:69:53:a0:de:bc:21:d6:c7:8c:55:0c:09:0b:7b:04:
         15:3f:f0:e7:3c:58:b2:3d:50:f4:e5:17:c7:02:04:2c:17:24:
         62:48:7d:ef:bd:93:f5:4d:6d:c0:f6:5e:49:9e:26:c6:bf:18:
         75:56:2b:26:7c:96:c4:4f:66:31:96:b2:40:20:9e:42:63:0a:
         bc:36:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:43 2024 by rpki-client on console-ams.rpki-client.org