Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa
File:                     1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa (raw, json)
Hash identifier:          9brTBYOxctSyx5R1yr4SllHeR2mkStEUATo0kwYpnn8=
Subject key identifier:   D0:C5:A1:15:14:4E:76:F5:B1:95:55:BD:39:F5:34:10:79:99:BC:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BC67D045EEEC9E833EA3100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa
Signing time:             Mon 11 Mar 2024 10:05:46 +0000
ROA not before:           Mon 11 Mar 2024 10:05:46 +0000
ROA not after:            Sun 09 Jun 2024 10:05:46 +0000
asID:                     63949
IP address blocks:        172.235.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:c6:7d:04:5e:ee:c9:e8:33:ea:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:05:46 2024 GMT
            Not After : Jun  9 10:05:46 2024 GMT
        Subject: CN=9752f5ee-548c-4206-8c66-0c87018eba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:d5:0f:0d:3f:ed:53:fa:8e:6a:93:0c:f9:
                    c9:b2:de:bd:78:95:81:e3:a5:7b:bf:22:63:20:89:
                    84:c8:2e:fd:86:57:e9:af:e2:90:ba:29:62:0c:9e:
                    f5:38:0b:4e:37:ae:79:27:04:a9:c4:92:a8:ac:57:
                    fa:a9:5c:09:69:8e:93:87:c3:f9:be:4a:1d:bd:0c:
                    a8:2c:1f:f9:0d:4a:07:0d:ff:2d:db:db:1b:d6:f2:
                    d9:5c:df:a9:e4:a5:da:1a:a9:cd:5b:0f:4e:b3:ce:
                    d7:b3:85:c4:b7:f5:89:90:43:85:33:c9:6d:10:83:
                    bb:aa:97:a7:f9:d2:25:eb:58:05:f5:8b:be:ea:be:
                    cf:91:e9:bf:8f:76:a7:f1:ae:e5:c1:d4:8a:b0:93:
                    3a:72:11:5f:f5:9b:35:0a:a4:79:21:6c:d1:4e:76:
                    6f:a0:1b:a8:c3:ff:13:00:38:bc:77:94:c5:84:9b:
                    95:1e:14:eb:43:39:43:5c:69:17:35:9c:34:95:46:
                    0c:25:5d:c4:36:cb:15:11:61:ff:00:25:cd:fb:b8:
                    94:1e:d3:1e:d2:83:87:1d:fd:28:33:30:dc:13:ce:
                    6e:52:35:cc:04:d8:5e:c7:fd:a9:db:03:26:9e:7d:
                    1a:2d:8c:94:52:1b:18:f3:21:19:73:dc:0a:d4:b3:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C5:A1:15:14:4E:76:F5:B1:95:55:BD:39:F5:34:10:79:99:BC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c6:18:3a:e9:98:ec:a7:b0:8c:90:a3:3d:59:b2:bf:85:08:
         2e:b9:52:f8:dc:92:7e:d4:48:6b:4e:61:4c:e7:f2:25:20:ef:
         ff:46:4c:e1:cd:9a:e3:17:68:d8:bc:29:bb:35:cd:96:ed:7b:
         5f:49:c4:1e:29:86:ad:f8:c2:03:cb:bf:26:b0:59:57:a4:5a:
         12:82:33:a3:49:ec:89:45:9b:7a:37:c8:f3:7e:69:a6:35:4b:
         f9:4a:c4:5b:db:93:cc:36:cb:e1:f7:32:70:37:4a:1b:fc:f4:
         a7:53:b5:60:2a:83:3b:ca:f5:87:6f:a4:e5:40:b2:d4:d4:2c:
         aa:fa:cd:9d:62:6c:8b:7d:c8:ff:60:18:cf:c7:51:65:a6:d0:
         10:bc:9f:2e:05:25:1f:27:3e:29:d8:1e:6e:e6:87:28:8e:27:
         ca:eb:47:3d:fe:f2:33:7e:6a:50:bb:6e:3d:cb:bb:b1:3e:63:
         08:36:57:2c:31:c8:55:3f:9f:0a:91:40:6d:9f:e4:3f:8b:58:
         ae:98:3a:83:c8:65:5b:da:62:6f:e2:cb:81:91:af:2c:21:ac:
         38:a6:e0:5a:8b:d7:65:62:8d:bd:5e:41:58:68:a4:97:80:89:
         9b:de:be:61:82:8c:12:c4:d5:a9:15:96:d4:c7:14:42:22:a5:
         33:5e:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:46 2024 by rpki-client on console-fra.rpki-client.org