Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
File:                     3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa (raw, json)
Hash identifier:          +Uo5hc9b+LWnpbQtmgK4a+na6fHuEYTm0W+3Mw7hDfA=
Subject key identifier:   E7:D4:20:2A:A9:A6:17:DD:61:B6:0C:FE:0C:C8:68:BE:E3:37:96:E2
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F43285845E193CD06026CE61BB46DB200
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     63270
IP address blocks:        209.212.48.0/20 maxlen: 24
                          2604:9fc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:06:02:6c:e6:1b:b4:6d:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=a0643a54-4b08-48ab-97aa-dd5781cd62e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:3f:54:6d:1d:1c:88:43:09:e4:7e:17:2f:
                    f9:31:6b:0f:96:6d:f1:e8:05:76:15:dc:50:38:18:
                    5a:ce:0b:19:cf:02:f5:5a:c0:42:dd:de:26:bf:c0:
                    dc:93:fb:be:6a:89:8f:14:c3:ba:cd:59:9d:9c:09:
                    3e:fb:10:6d:2a:99:a9:f4:cd:2a:81:cc:ad:6e:67:
                    54:72:61:77:61:24:2e:79:c9:df:6d:bc:6f:8e:f5:
                    88:72:f2:e1:4d:97:8b:39:27:7e:a3:59:b7:7f:02:
                    51:98:33:18:92:be:27:e3:d5:ba:c4:f6:97:d7:0e:
                    c4:34:3e:f5:6c:92:d1:ee:22:fa:2e:00:39:59:3a:
                    97:2a:d7:48:0b:a7:cc:e1:45:33:c3:26:e3:65:5f:
                    ff:2a:7d:af:db:6e:e8:28:a0:ef:eb:0f:86:8d:86:
                    2f:38:35:3d:ec:29:b9:ad:2b:1c:72:c4:c1:4f:f9:
                    b8:74:18:64:8e:d2:c5:80:e8:f1:90:0d:61:83:1b:
                    84:4e:9d:26:92:76:15:50:bd:a8:34:ab:36:d2:72:
                    63:6f:f5:00:ad:03:55:1e:20:a4:c4:11:29:80:ab:
                    e7:06:4b:9a:66:49:a5:13:49:20:35:72:1e:b6:ae:
                    fa:c8:cc:2c:6f:c4:21:e4:e6:20:71:be:c9:90:1e:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:20:2A:A9:A6:17:DD:61:B6:0C:FE:0C:C8:68:BE:E3:37:96:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.48.0/20
                IPv6:
                  2604:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:b0:a0:c5:55:3d:0c:4f:8a:f7:c9:d8:4d:38:3b:40:5c:
         50:11:c5:00:29:c0:0e:3e:8b:6d:ff:99:35:a7:92:ba:08:fe:
         a5:24:bd:f3:e3:1c:92:66:10:91:2b:47:69:2e:e2:00:26:c4:
         1b:fb:1a:58:8a:96:c6:55:9b:ce:bc:db:28:a4:95:c6:86:ac:
         7e:c6:30:51:4e:de:6e:26:0a:8d:92:71:97:8a:d4:4e:5d:9a:
         a6:e7:43:28:66:09:b8:be:3f:aa:7f:3c:a4:65:4d:3b:e9:d7:
         4f:89:0f:ef:7a:09:0d:a7:79:6a:3f:a0:ad:0f:1b:b5:0f:ef:
         98:5c:f0:86:86:4b:4b:67:fe:95:21:ce:75:a2:9e:f5:f9:64:
         4d:e3:04:58:7d:f9:48:52:ff:9a:58:4f:0d:34:2d:76:45:4a:
         14:a5:c8:df:82:12:3e:24:a2:b3:e6:37:a5:59:e3:28:5b:20:
         29:ed:28:77:0d:c5:2c:93:6a:79:cf:51:cc:aa:c4:e7:da:0f:
         c0:3e:c5:61:31:3d:3c:f0:e5:7e:59:76:07:a3:24:7e:03:73:
         8b:19:57:62:ba:cb:d8:e6:18:0f:d5:e0:77:ce:91:89:82:12:
         c7:fe:74:eb:38:4b:69:54:fb:99:cc:73:d2:91:5e:d3:1c:50:
         be:82:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:32 2024 by rpki-client on console-fra.rpki-client.org