Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
File:                     fe70053b-12a5-3548-80b7-9e1a15deca1a.roa (raw, json)
Hash identifier:          K3VjnZQUaXp0zTcJ003T2eRoV0USbo3E9+1fuZ8jTSI=
Subject key identifier:   59:20:5C:CF:7A:9E:B9:89:DF:4C:91:65:91:5B:CA:67:3A:65:EB:DD
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858456E1DF37E1CF7B5ADEB38F3C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
Signing time:             Thu 04 Apr 2024 04:25:20 +0000
ROA not before:           Thu 04 Apr 2024 04:25:20 +0000
ROA not after:            Wed 03 Jul 2024 04:25:20 +0000
asID:                     2734
IP address blocks:        67.212.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6e:1d:f3:7e:1c:f7:b5:ad:eb:38:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  4 04:25:20 2024 GMT
            Not After : Jul  3 04:25:20 2024 GMT
        Subject: CN=97beeaab-3c54-4127-a49e-989762831a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:a7:61:0a:2e:1c:81:c7:30:2a:bd:b0:08:
                    c0:fa:08:f2:f5:ab:46:22:ff:8e:35:46:db:23:c5:
                    8f:ca:dd:43:91:1c:31:93:96:2f:d4:92:37:e0:65:
                    50:81:c4:df:04:6c:f9:ee:43:58:d3:f5:72:7b:7c:
                    ac:58:24:ff:03:48:dd:77:55:1c:82:a4:40:2b:97:
                    44:44:b7:10:2c:31:7d:07:ce:d9:a9:c8:bb:3a:9b:
                    65:28:92:e4:f5:3b:60:71:b7:5c:4f:db:a4:f2:83:
                    12:38:34:8f:b3:66:cd:0c:1f:19:b0:e9:58:c5:45:
                    b6:a7:d2:d7:2f:70:b7:3f:e9:bd:dc:4c:9b:20:a4:
                    d4:83:63:4e:d3:f0:4e:96:b3:d1:54:32:e2:db:af:
                    77:6c:9f:dd:0c:87:d3:9e:3c:bd:92:f1:8e:63:ab:
                    87:2c:4d:03:a1:73:af:c5:dd:7f:59:16:3c:cc:ac:
                    2a:25:66:85:eb:d6:e4:cf:69:75:e5:f7:06:d2:21:
                    94:41:a3:74:ef:b9:0b:31:e3:ae:76:50:fc:87:cc:
                    7b:7b:01:8d:84:76:0d:a6:2f:34:86:62:b2:3b:7f:
                    1b:33:16:8f:e3:cf:0a:61:be:73:c6:e9:64:83:30:
                    a3:82:7b:e0:d7:94:b2:c1:c7:22:42:ae:b2:1d:1b:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:5C:CF:7A:9E:B9:89:DF:4C:91:65:91:5B:CA:67:3A:65:EB:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:68:15:77:2d:a0:e9:02:79:9b:2e:b5:f2:50:14:fb:d1:
         ed:9c:ea:19:88:48:23:96:5b:10:a1:82:8f:4c:7f:b6:ee:d6:
         07:d7:23:5c:84:8a:f5:9c:e5:3f:3d:e8:6a:88:9e:33:08:02:
         55:82:ed:1a:a7:61:ac:7f:6a:22:1c:47:b5:a8:17:2c:d5:42:
         08:c5:26:1c:9b:bd:8c:f0:e4:b4:fd:81:92:f6:52:1d:e6:5d:
         8f:73:c5:f1:d8:c9:ee:fa:60:cc:75:07:44:c5:32:e6:8d:a4:
         ca:6e:0c:b5:a1:79:0b:30:30:38:b7:41:2f:8b:1c:58:45:b0:
         65:26:76:96:34:f9:7f:45:b6:ab:e0:8b:d8:17:93:07:a1:7a:
         ce:4c:86:35:5a:1c:c5:51:45:70:70:5d:1e:5f:4a:d2:1a:3e:
         9e:cf:38:26:c6:f0:94:dd:20:a3:1a:97:82:64:9d:de:75:a5:
         bf:9c:1f:e5:b3:3b:60:02:60:b9:e2:2d:a5:7e:d6:a8:ec:be:
         a7:2d:75:ac:74:9f:9c:cc:02:63:ee:1b:bb:0f:d6:f0:19:97:
         a6:59:66:80:3b:e5:37:59:8f:09:34:3e:ca:c4:1e:49:48:63:
         c9:df:61:07:c3:20:04:ed:97:26:22:49:2b:30:d2:a3:d6:90:
         a2:23:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:13:05 2024 by rpki-client on console-fra.rpki-client.org