Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
File:                     caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json)
Hash identifier:          Cc5tIyzocf/+zxcy96f0hF5Xy57zM4wb6Nc8dv9xJq0=
Subject key identifier:   A4:48:AF:F5:5A:90:CD:B1:39:12:20:AE:E6:20:C9:C7:68:D2:EB:C9
Certificate issuer:       /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Certificate serial:       010D0C9F43285845CB3E59DC6D23D0A451E85080
Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     8560
IP address blocks:        162.254.24.0/22 maxlen: 32
                          158.222.102.0/23 maxlen: 32
                          208.94.36.0/22 maxlen: 32
                          192.206.141.0/24 maxlen: 32
                          192.152.28.0/24 maxlen: 32
                          192.96.159.0/24 maxlen: 32
                          2607:b500::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:59:dc:6d:23:d0:a4:51:e8:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=9eb65f87-d696-4c78-99a3-69030af40131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:22:42:dd:f8:f4:99:30:32:6c:b2:e6:e2:
                    69:ca:fb:e7:51:c4:69:a9:ab:57:77:96:e7:aa:54:
                    72:6e:24:3f:fe:9b:4e:c6:85:b2:00:17:2c:e4:44:
                    ae:b7:d6:6a:41:cd:0d:73:34:05:70:d5:9f:ba:f1:
                    84:09:45:e4:9c:2f:0c:82:d8:b8:9f:b1:11:b4:2a:
                    f2:bf:1e:c0:60:9f:6a:5f:90:11:58:98:e8:c9:ca:
                    f5:a4:75:31:d4:5a:b1:44:cd:87:08:ae:f4:b0:de:
                    9d:3b:2e:08:79:45:6d:72:2b:39:91:fa:68:68:cf:
                    fb:0d:fb:53:7c:5f:a9:1d:5b:65:4c:04:ca:ee:a4:
                    3e:54:4c:76:bb:41:a1:c8:80:fc:67:75:71:36:07:
                    b8:b2:2e:b7:20:45:04:85:18:37:2a:4b:df:34:87:
                    0b:b1:22:6c:09:e8:6d:f2:ff:20:a5:a0:d5:fd:69:
                    80:b4:d2:a2:2d:0e:4b:80:8f:e2:32:85:1b:a3:44:
                    24:43:9c:c9:3b:4a:76:81:76:29:d3:3e:fb:a5:ca:
                    29:7d:bf:71:59:73:31:44:61:a1:f5:8c:3c:2b:e3:
                    a9:93:3e:19:f6:d8:c4:65:b2:7a:17:05:b7:d5:df:
                    ac:07:a6:5c:91:de:cd:c0:b5:75:04:80:0b:7a:8a:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:48:AF:F5:5A:90:CD:B1:39:12:20:AE:E6:20:C9:C7:68:D2:EB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.102.0/23
                  162.254.24.0/22
                  192.96.159.0/24
                  192.152.28.0/24
                  192.206.141.0/24
                  208.94.36.0/22
                IPv6:
                  2607:b500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:96:bb:53:d1:ec:41:a2:ad:2b:57:4e:11:d4:37:59:1e:
         9c:6d:9f:3a:b4:92:fe:b2:ee:87:78:b4:38:13:c9:4c:e4:2e:
         21:9d:96:63:9d:31:37:27:c7:d0:b7:00:d0:c3:96:01:3b:f6:
         f0:f7:02:3a:c7:06:30:92:a9:11:1a:97:c8:f5:6e:c5:6a:59:
         3a:56:ca:04:16:d9:52:00:92:2b:67:e9:a6:9f:c2:b6:0d:f3:
         9a:b8:1b:da:dd:67:15:58:6e:95:81:a7:0c:a7:f2:b8:68:ee:
         c0:ae:f7:ad:ed:d5:72:ee:ab:fc:ac:90:92:77:9b:90:4c:5a:
         08:0a:48:0a:9f:83:28:5e:aa:0a:13:4f:3a:86:41:0d:82:22:
         38:e1:5a:b3:7d:91:7f:da:40:f1:bf:15:7f:5f:b5:19:b3:d8:
         4d:e2:83:10:95:c7:0a:1e:05:5d:98:23:0f:e8:fc:aa:7a:de:
         36:68:44:4d:d1:bb:72:57:66:d3:db:87:00:52:e4:cf:4c:cd:
         a9:b0:27:71:19:a8:a6:50:df:0d:59:b4:95:25:4e:b1:0a:67:
         a2:2e:26:51:ee:72:2c:06:a5:42:ee:15:6d:0c:50:54:29:0d:
         17:51:62:74:23:2f:ea:6f:46:ba:34:0e:ce:04:ec:da:5e:e8:
         d5:04:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:23:32 2024 by rpki-client on console-ams.rpki-client.org