Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
File:                     dc442485-e1e1-32df-b067-e09e5cdece8f.roa (raw, json)
Hash identifier:          8Z62J4zFRAa/tJFHQofJeh1xdYB+WQ4SpMkgTHSY0tM=
Subject key identifier:   B7:D6:F2:DE:96:EC:3E:3B:4E:76:2F:38:86:34:BD:A4:96:71:73:64
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584566BDADD7BC19503304768C40
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     1299
IP address blocks:        199.83.232.0/26 maxlen: 26
                          199.83.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ad:d7:bc:19:50:33:04:76:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=52238742-7d9a-42b4-af77-0b046ad76770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:1e:16:c3:38:ab:a9:0f:fe:c7:93:30:0d:
                    3c:ad:62:21:00:5a:43:41:f7:4a:4f:8c:10:f8:c6:
                    02:42:f7:46:84:41:d0:47:5a:8e:6b:0d:f2:61:dc:
                    18:eb:be:26:c1:9b:74:4e:a1:68:94:80:7c:a5:48:
                    98:ef:90:e3:2c:ae:2a:1d:21:c8:e7:95:9c:2d:08:
                    ab:10:4f:6c:aa:a4:59:91:37:8f:48:39:77:98:e5:
                    b0:29:34:bc:c1:66:ee:4a:49:a5:3e:ae:8b:0d:f6:
                    06:57:bf:a3:cc:e2:d1:2a:8a:5c:78:02:08:9d:29:
                    01:d1:5f:eb:5f:b1:f7:a9:85:d0:c5:fd:17:bb:28:
                    71:79:85:1f:85:69:0c:19:28:f6:73:4c:c4:88:81:
                    ca:84:62:00:0c:b8:23:37:61:54:54:1f:90:bd:37:
                    d3:48:0d:ac:0e:98:90:bf:8a:66:3a:03:82:8d:89:
                    0e:d7:ef:40:bb:14:49:3c:ea:b0:bc:77:96:cf:de:
                    d6:be:59:2f:73:47:c9:31:33:8f:4e:fc:5c:15:ff:
                    32:aa:49:50:e6:31:3b:a0:00:c9:80:ea:ef:9b:44:
                    88:e5:b8:81:c2:23:1d:47:f7:a2:fa:09:2c:50:73:
                    e2:09:b9:73:1b:9b:86:00:6e:94:16:8d:f0:5b:98:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:F2:DE:96:EC:3E:3B:4E:76:2F:38:86:34:BD:A4:96:71:73:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:cd:c6:b1:6d:e0:ea:f0:93:72:38:11:f3:d8:e7:a0:9b:
         b4:5c:ed:bb:cb:70:5b:74:8b:87:35:14:7f:cb:0c:db:92:6b:
         77:fe:d2:34:44:90:45:8e:cd:81:d0:a8:c2:24:07:8f:cc:ab:
         93:48:91:51:91:30:51:c6:97:24:70:cf:2b:1c:54:df:58:74:
         0e:d4:45:c7:ef:48:63:23:d1:dd:56:be:dd:a8:3f:73:03:37:
         2a:fb:07:ac:c7:70:27:64:fd:97:b1:fd:28:a5:bc:71:53:91:
         5a:b0:53:06:a0:30:cd:6e:40:ac:25:52:91:90:46:64:7f:e5:
         a1:17:8f:a5:e2:92:a1:fb:86:5a:c7:2c:c9:0e:f4:37:c9:c0:
         d8:17:b2:4f:2d:cb:81:a1:e9:b8:bb:58:f5:30:f3:26:41:98:
         88:9b:3d:f9:ca:da:df:08:ab:09:39:21:1f:bc:db:17:a0:34:
         95:ed:45:eb:3c:ad:ce:4b:ed:41:64:43:94:02:72:5d:cd:79:
         7a:1c:03:39:88:e4:05:26:74:5f:01:d9:f9:8c:83:15:a0:c1:
         7b:b7:20:39:8f:7d:e3:93:f8:23:c9:f6:f1:33:a5:2d:f1:98:
         20:58:e4:15:28:b0:cd:c7:b0:26:51:a5:12:81:58:6e:42:6d:
         2d:97:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:26:17 2024 by rpki-client on console-ams.rpki-client.org