Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/a75dcec6-859a-318e-9641-174b49337611.roa
File:                     a75dcec6-859a-318e-9641-174b49337611.roa (raw, json)
Hash identifier:          72uqdRGegOx7pVAuzYrBLSHFk+1h8LjcBjRRfsU8nDU=
Subject key identifier:   1B:44:E7:F7:0A:EC:15:0A:22:78:6C:AD:10:F5:07:A0:1C:B0:FA:48
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858456FD3BE7F07116A2769CCE480
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/a75dcec6-859a-318e-9641-174b49337611.roa
Signing time:             Thu 04 Apr 2024 19:07:26 +0000
ROA not before:           Thu 04 Apr 2024 19:07:26 +0000
ROA not after:            Wed 03 Jul 2024 19:07:26 +0000
asID:                     2734
IP address blocks:        67.212.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:d3:be:7f:07:11:6a:27:69:cc:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  4 19:07:26 2024 GMT
            Not After : Jul  3 19:07:26 2024 GMT
        Subject: CN=30d1bb28-780a-466f-ab16-e9610b1a15b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:c1:69:66:74:90:f1:83:ef:c4:75:69:47:
                    72:ca:06:34:a5:62:9c:f9:19:70:e8:f1:11:65:8d:
                    81:5d:e9:8d:1e:18:c5:ed:54:30:f9:9b:52:fc:25:
                    57:44:0d:1e:d5:f5:35:6e:0d:df:80:cc:00:f1:a6:
                    ba:6d:09:aa:8b:70:66:b0:41:b8:09:d3:bf:24:cc:
                    e3:e2:c7:b1:63:6b:bb:d2:8c:b4:c1:b6:cb:76:11:
                    9d:ef:bb:21:58:7c:76:6a:4b:12:66:aa:b1:69:37:
                    fb:e2:3a:7a:b1:eb:47:cc:53:c7:8b:f7:77:0c:72:
                    ec:09:85:0b:93:f0:92:ca:8e:09:0d:be:ee:a2:8b:
                    1a:c5:54:ca:6f:ab:87:fa:eb:4f:02:5d:fd:ea:dc:
                    b4:10:16:33:f7:b8:8c:2a:9e:31:2c:a2:93:66:63:
                    87:5c:ff:0d:c5:37:52:61:0d:a3:82:99:bf:6b:e7:
                    5c:36:d3:67:4a:94:cb:9a:ac:fc:15:13:e8:29:cd:
                    53:10:f9:97:93:46:f1:d7:f0:71:34:68:69:73:3d:
                    e5:fd:26:56:97:44:c7:21:0a:ae:63:73:82:29:e2:
                    35:17:8b:25:53:22:48:f6:39:46:c9:46:0f:40:ca:
                    4b:95:18:ef:8f:25:52:7c:e0:37:a5:58:fa:79:57:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:E7:F7:0A:EC:15:0A:22:78:6C:AD:10:F5:07:A0:1C:B0:FA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/a75dcec6-859a-318e-9641-174b49337611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:c6:d1:56:88:6c:c5:12:d4:a9:ec:bf:58:83:06:13:58:
         77:a7:54:82:54:4a:0f:86:9b:ff:0c:05:cd:19:fe:37:5b:16:
         a6:0d:0a:3f:78:e4:55:a6:6a:14:67:89:12:cf:58:97:57:f8:
         a9:96:ab:a5:b8:08:f7:fc:8f:bc:37:ad:3d:0a:8b:b3:a1:6f:
         02:30:4b:4c:67:29:29:0e:31:a7:da:af:5a:5c:96:3d:fe:d4:
         c8:35:cc:63:6f:6e:72:28:3a:33:0d:6b:6e:da:ab:61:20:f0:
         f9:19:56:0b:15:64:44:b4:a3:b9:da:dd:89:0d:5e:8b:02:dc:
         ed:8e:86:1f:98:e5:52:28:f8:87:e5:0f:f1:51:a1:77:90:6a:
         9d:4e:18:68:43:95:6c:0e:ed:26:f9:8c:8d:18:1b:8f:d4:9c:
         2a:41:ad:67:94:4f:65:d8:a3:fd:fc:4d:6a:0d:68:d9:cd:f4:
         14:fd:19:b2:b0:2a:57:47:86:9a:19:e4:ff:d2:58:05:b8:73:
         41:ff:34:fb:8a:3b:7d:cb:bf:ef:d3:33:4b:fd:4e:63:4a:e5:
         bc:76:72:82:da:e2:87:5f:86:61:65:33:af:cb:b2:d0:50:ff:
         6c:a0:43:7a:7b:c2:e1:64:b8:ce:91:80:64:1e:0d:50:e6:44:
         e8:2b:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:58:10 2024 by rpki-client on console-ams.rpki-client.org