Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
File:                     5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa (raw, json)
Hash identifier:          UFCdto5wNQ5apqD+lHybBnyX34pSs3C6XCozbrx//HE=
Subject key identifier:   7C:43:9B:27:CD:C9:AA:4A:07:3A:0B:EE:8E:2E:2B:A1:88:D3:11:16
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584569886CBBB41635BAD6B6C600
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     54032
IP address blocks:        72.233.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6c:bb:b4:16:35:ba:d6:b6:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=6443af75-67da-41db-827a-1bf1f776d50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:9b:27:00:5e:35:af:1a:7d:76:e6:7d:af:
                    62:63:5d:3d:b9:5e:d0:8a:af:61:f7:1f:e3:90:47:
                    46:09:df:f9:c7:c9:eb:6d:fc:17:37:b3:15:55:09:
                    06:bc:41:4f:f8:c4:f4:7d:0f:98:4c:ba:90:20:e2:
                    11:6c:59:15:a9:51:b2:f0:bf:e4:ea:2f:70:40:39:
                    23:ef:d6:9c:b4:e5:54:88:82:97:42:d5:87:4a:9a:
                    87:6b:d7:08:ca:f4:3b:15:ff:c3:fe:9d:9b:78:c5:
                    91:8b:de:76:23:af:59:8d:c1:58:f0:88:3e:0f:b3:
                    0f:24:5e:18:c1:ce:9d:8a:bb:63:68:cc:e2:71:2b:
                    5c:90:d4:b0:59:6e:e2:cc:7f:91:49:a7:6c:4d:8e:
                    26:22:50:bf:86:c5:0b:55:9e:e7:37:8f:8b:c0:9b:
                    4f:fa:92:e3:aa:f5:47:4b:3b:0c:06:37:bf:0c:14:
                    55:5d:75:af:48:bb:57:6a:df:a4:9a:11:78:86:68:
                    f7:21:a6:53:c6:b0:11:be:e6:be:fc:f0:78:45:e4:
                    25:f6:ce:d9:66:0e:27:6e:24:9b:f6:dc:45:f8:51:
                    62:3c:ac:ec:6d:3e:98:59:78:81:fe:24:48:7d:7e:
                    3d:ae:c4:9b:88:f4:ce:1e:36:2e:30:6d:71:53:64:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:43:9B:27:CD:C9:AA:4A:07:3A:0B:EE:8E:2E:2B:A1:88:D3:11:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:af:1a:05:2c:22:46:19:32:c2:e8:16:8a:fd:49:23:0b:
         f0:7f:fb:ce:dd:c4:2e:55:f2:ee:57:52:d0:c4:c8:02:8b:3b:
         96:5d:ab:25:74:ca:0c:eb:23:8d:d1:a6:29:32:97:ec:69:0b:
         47:52:87:66:05:c5:42:94:11:44:2c:c3:60:88:95:83:60:49:
         cb:7a:47:82:1e:23:fd:c5:8f:50:08:0c:09:f8:69:d4:f1:c4:
         aa:cb:3c:a7:4d:cf:f5:d9:b0:b3:0a:08:74:93:c7:c9:84:5b:
         33:6a:fc:06:e7:9f:e1:cc:86:b6:97:f0:57:bc:9a:35:11:14:
         ab:1e:37:4f:37:5e:74:3e:fa:ef:79:7d:48:a2:b6:54:bb:a4:
         d6:27:7b:aa:b7:21:b2:36:b5:e7:7c:e7:d2:3e:ae:db:b6:a7:
         97:3f:ce:a4:5a:02:98:e8:0a:2c:38:1d:8e:44:6b:39:b6:d8:
         16:bd:8e:2e:88:f8:06:ed:6b:44:9e:f4:25:85:66:bf:a8:7e:
         f9:9e:ad:0b:75:46:db:e4:1b:91:f9:21:c4:3f:30:38:a8:74:
         54:eb:70:13:3d:61:b4:1c:86:eb:85:da:85:3f:e5:02:e7:d5:
         70:e9:87:8d:3b:48:cc:52:d8:9e:5d:d1:22:1e:b0:2b:8d:84:
         76:39:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:47 2024 by rpki-client on console-ams.rpki-client.org