Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa
File:                     43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa (raw, json)
Hash identifier:          BcC4V8I2dL8L7txkcHSSlpth3UBjKzr79844WeEO7ps=
Subject key identifier:   B2:65:A6:3A:66:0F:D6:BB:CE:97:FC:23:8E:21:61:5E:50:E9:BD:EF
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F432858451E4599D5BD6D02364526E500
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa
Signing time:             Wed 06 Mar 2024 14:00:31 +0000
ROA not before:           Wed 06 Mar 2024 14:00:31 +0000
ROA not after:            Tue 04 Jun 2024 13:00:31 +0000
asID:                     138699
IP address blocks:        71.18.253.0/24 maxlen: 24
                          71.18.252.0/24 maxlen: 24
                          71.18.249.0/24 maxlen: 24
                          71.18.251.0/24 maxlen: 24
                          71.18.250.0/24 maxlen: 24
                          71.18.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:45:99:d5:bd:6d:02:36:45:26:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Mar  6 14:00:31 2024 GMT
            Not After : Jun  4 13:00:31 2024 GMT
        Subject: CN=75ec1b9f-ae81-46b7-b364-b7269d9e365b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:47:41:bb:1c:0b:6b:26:4c:b1:1e:54:27:
                    4a:66:8d:25:24:a4:45:64:68:4e:b3:97:0b:bb:72:
                    79:fa:c2:41:b8:01:a4:7a:3d:b8:2f:9a:c5:d8:18:
                    64:90:7d:c7:7d:4e:f0:bf:04:18:08:44:fa:09:72:
                    23:2d:63:79:fc:d0:b8:a4:78:23:7f:44:62:26:8f:
                    23:9a:d0:0a:70:75:18:3c:d5:6b:bf:0d:e6:af:0c:
                    56:65:bf:5b:0d:b6:a8:23:02:d7:0c:0e:90:01:9b:
                    7f:6e:2f:37:71:df:4a:27:7a:da:ca:56:a0:d5:9f:
                    92:bb:62:7c:aa:30:3d:5c:d9:5e:b1:d4:8c:b7:48:
                    a0:95:e9:22:89:ab:3b:90:a2:23:d1:a7:ae:09:01:
                    3f:8c:8b:5e:5b:53:d6:47:2d:c9:72:03:80:53:bf:
                    c3:b7:18:20:b3:a2:91:d7:98:b8:9d:b3:96:0b:ab:
                    a9:29:67:21:2c:65:e2:77:2b:30:93:f1:59:f3:c9:
                    c0:75:02:aa:df:0e:1a:3e:71:f3:5b:f2:92:cb:4d:
                    58:32:75:c1:47:33:96:8d:50:95:89:ab:a1:f5:d3:
                    a1:b3:ad:2a:ab:e7:25:46:6f:fb:2b:1e:53:bf:58:
                    45:bc:bc:23:4e:94:e6:46:82:03:7c:f4:73:22:14:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:A6:3A:66:0F:D6:BB:CE:97:FC:23:8E:21:61:5E:50:E9:BD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.248.0-71.18.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:c8:fd:bf:8f:10:3d:5e:22:20:6a:90:8b:1d:b2:7b:91:
         06:ed:23:2c:0e:1c:2e:5d:d3:a7:11:44:14:b1:36:c1:1d:44:
         70:58:ab:22:cd:78:8f:c8:52:02:6b:94:f2:67:08:81:88:89:
         1f:c5:5f:47:7f:e6:a2:d0:b6:f4:99:b6:5f:8e:87:a4:03:8d:
         ad:a1:ab:44:21:ae:9a:4d:62:18:53:09:17:48:d0:f4:71:27:
         9a:2a:eb:41:ea:a7:85:99:1b:4c:3c:7a:91:64:b8:18:68:9d:
         b2:2b:59:b9:f5:d8:cf:80:0c:ac:ab:06:64:54:84:c0:9d:3c:
         57:9e:f4:7e:17:9e:0b:4c:47:9f:fd:77:01:c2:f2:76:34:c3:
         11:d8:44:c5:66:5c:74:d5:6b:b7:26:32:9b:05:37:7d:5b:55:
         b0:67:0c:b7:31:57:2f:99:e1:75:1f:8b:e6:13:ec:c5:c6:e4:
         62:7b:cd:eb:23:72:31:5b:01:37:35:61:da:90:6c:0f:c6:17:
         86:f0:3c:2f:0f:cb:45:5c:4a:81:86:8b:01:fc:e3:20:1e:2a:
         ba:28:03:56:33:f2:61:10:a0:43:93:a5:6f:27:36:9a:16:c7:
         d6:b2:d3:73:ee:da:45:f6:c2:cb:db:6d:4f:cb:52:b3:e2:cd:
         ad:bc:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:32 2024 by rpki-client on console-ams.rpki-client.org