Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa
File:                     b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json)
Hash identifier:          +z36Jj9o3oDQsDX3fpUsyyQb0CTMo1yhLQW2rDQotfY=
Subject key identifier:   A7:B1:83:C5:DF:B0:D3:1A:16:17:5C:1A:EB:95:AE:2C:35:7F:32:85
Certificate issuer:       /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial:       010D0C9F43285845F683D61B73DB10E1F4411A80
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa
Signing time:             Thu 23 May 2024 01:00:26 +0000
ROA not before:           Thu 23 May 2024 01:00:26 +0000
ROA not after:            Wed 21 Aug 2024 01:00:26 +0000
asID:                     32931
IP address blocks:        199.91.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:83:d6:1b:73:db:10:e1:f4:41:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
        Validity
            Not Before: May 23 01:00:26 2024 GMT
            Not After : Aug 21 01:00:26 2024 GMT
        Subject: CN=d7794eff-b904-4f37-bc6f-af527737ac38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:06:28:d2:71:30:ae:73:23:63:49:16:14:
                    a9:f3:52:b0:79:44:e6:62:b8:d2:e9:06:5f:6d:d8:
                    fe:e5:a1:b6:37:63:e7:b8:2e:f0:e0:20:3e:ca:f3:
                    c4:31:cc:7c:36:c3:46:99:12:de:41:83:36:f7:93:
                    09:58:78:43:da:55:16:e2:9c:fc:8c:8c:44:3c:41:
                    ff:24:5a:0a:ee:69:24:ba:d5:9d:30:df:77:8c:fe:
                    26:a4:05:74:55:b1:9a:25:0b:b8:05:eb:98:92:d2:
                    6c:e4:3d:01:da:b8:bb:29:18:6a:0f:4e:1c:71:3c:
                    de:31:b3:06:dd:15:31:be:7d:a5:1a:bc:9e:6a:29:
                    81:c3:34:ae:8a:85:cd:99:ff:5c:f5:5a:b3:c5:75:
                    1c:b9:fa:cd:93:f1:9d:95:49:11:37:19:b3:e0:a0:
                    ad:07:8d:ef:6b:df:e2:b1:b3:9a:33:7b:09:3b:74:
                    c7:f4:2c:af:96:63:40:14:19:a6:6c:71:c4:c5:bf:
                    d3:e9:2e:e8:ac:f6:17:cf:a0:39:86:45:a3:35:3e:
                    54:8e:a0:ea:05:d0:3d:e8:92:de:d5:48:5a:c1:e4:
                    a5:b0:25:2c:c9:00:45:f7:ef:7f:ba:48:93:62:fe:
                    16:ff:6f:30:cd:66:ce:a8:e7:05:82:b0:e7:7c:cf:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B1:83:C5:DF:B0:D3:1A:16:17:5C:1A:EB:95:AE:2C:35:7F:32:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl

            X509v3 Authority Key Identifier:
                keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:2e:64:3d:bc:74:57:fe:e6:f7:c3:91:b1:b2:8b:88:9d:
         c6:3c:a3:3f:7d:9f:9b:dd:38:cd:99:56:aa:35:d4:7e:07:26:
         d3:77:90:de:29:b3:b6:06:71:b2:28:c7:d4:81:e2:e6:ed:aa:
         76:48:af:09:ac:e8:57:5b:da:08:02:d4:48:57:48:5e:d6:92:
         c0:27:65:34:6d:c6:22:68:12:73:ef:5c:e5:a8:0a:6d:84:40:
         2a:8f:7f:24:e7:60:d1:9f:42:5b:35:c2:04:91:b0:dd:09:17:
         b1:f0:55:35:c9:c9:ec:5d:ed:47:c1:34:17:f9:d4:17:c3:a0:
         ae:0e:30:09:ba:e4:76:f3:9d:8f:ac:d1:a4:39:6c:3a:e8:62:
         7b:ba:97:34:85:c3:3d:12:87:e7:c5:88:a1:1b:5e:8c:93:a2:
         24:e5:60:a9:93:15:62:1f:dc:55:88:fe:d7:b5:14:51:8a:4c:
         c9:5c:81:6c:8a:89:11:d7:8a:e9:f6:57:ba:3e:57:61:e9:92:
         1b:7a:3d:fa:b4:e3:fc:f4:8c:76:54:b2:a9:23:57:0b:11:f1:
         1a:dd:2d:2d:2f:e4:ac:31:1d:bd:77:d1:fc:6b:a6:b2:3b:ce:
         5a:dd:db:bc:d6:0e:41:5a:05:53:d4:55:13:ff:fe:75:95:f4:
         41:a3:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 17:53:04 2024 by rpki-client on console-ams.rpki-client.org