Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa
File:                     122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa (raw, json)
Hash identifier:          JRmqAdrQmucrMX3/ao4Rv9FyvBhCEZjn/uIrGiDONxU=
Subject key identifier:   69:30:25:D7:D7:9B:AC:53:0B:E6:52:40:C3:01:90:6E:AE:A6:A6:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEC9461939526A7D4773D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     63949
IP address blocks:        172.234.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:46:19:39:52:6a:7d:47:73:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=8c417eeb-74ad-4555-8b7e-0149331acfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:7f:7a:2b:ad:9d:75:93:9e:55:56:d7:6d:
                    8b:3b:b9:59:93:5f:53:6f:72:91:d0:70:55:dc:93:
                    5a:dd:fc:ea:6d:ae:48:fc:38:be:ae:dd:8a:9f:b3:
                    60:fb:a4:19:32:8b:83:75:22:ee:ec:d2:2d:47:b8:
                    f5:8c:7b:d4:63:5f:61:73:1f:b1:fc:6b:0b:de:87:
                    11:a4:a6:e7:24:89:cf:c2:79:8b:e5:e8:43:6a:38:
                    44:be:17:35:27:fc:22:53:4d:ad:17:85:5d:c4:80:
                    be:5c:70:f6:3b:52:43:09:25:28:c2:a6:65:eb:df:
                    29:13:fe:78:46:5a:f4:ef:af:16:35:70:a0:9b:44:
                    c3:e8:70:92:ca:2e:5e:1d:41:dd:70:84:b1:5c:fb:
                    73:0e:9b:2f:ae:4d:4e:90:d6:98:2d:83:3b:f1:38:
                    9d:70:06:a9:55:af:f9:5d:13:34:cc:1f:d4:fe:df:
                    26:4c:0f:db:0e:b8:f1:28:25:8c:38:c1:89:ca:59:
                    65:7d:ee:e2:33:7d:c0:7b:99:43:0c:84:77:18:a7:
                    f6:ac:a8:e3:c4:5a:11:40:42:7b:a8:06:fd:be:d1:
                    5e:e7:e7:b5:46:a5:0e:82:68:e0:22:f5:48:79:e6:
                    47:b3:79:0a:f0:b2:e0:fe:f7:96:32:23:40:7f:5e:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:30:25:D7:D7:9B:AC:53:0B:E6:52:40:C3:01:90:6E:AE:A6:A6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.234.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:49:c5:32:32:6d:aa:a6:96:25:73:82:d2:3e:03:af:0d:
         a8:9a:1d:19:20:5f:51:8d:a5:e7:ff:9f:99:35:72:c6:fc:c0:
         07:97:56:42:49:27:97:80:e5:76:15:6f:93:54:4d:f2:ad:11:
         f0:49:de:80:bf:80:33:98:7a:ea:c3:10:38:6a:49:50:73:b9:
         00:e8:e7:cc:1a:29:56:d3:0d:d1:f9:9b:4c:e2:f4:86:9c:69:
         1c:b5:b5:83:0c:72:3b:5a:39:0a:13:8d:78:28:34:8a:62:a8:
         a2:82:48:36:ba:4c:3f:fb:85:55:9f:ed:cd:e9:3a:d0:35:61:
         14:00:12:b4:36:c9:50:b3:03:3a:68:5a:6c:eb:4c:3a:63:89:
         b6:34:c3:70:59:34:cd:f2:22:01:0d:16:cb:47:aa:03:62:e5:
         f1:2a:bb:7d:51:97:7d:e1:8a:96:ed:09:78:41:71:d1:73:70:
         b3:79:19:91:3d:16:01:41:6f:89:8c:9f:1a:66:56:50:96:9f:
         93:fc:e3:2c:8d:87:58:80:17:4b:09:ce:20:c3:51:63:a2:44:
         56:3d:85:4b:dc:1d:28:2e:8f:a7:3e:b1:01:03:91:d0:af:d6:
         ec:9b:34:33:3d:f8:8b:7a:f7:59:da:35:40:91:ad:44:de:35:
         43:32:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:55 2024 by rpki-client on console-ams.rpki-client.org