Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa
File:                     402a2ade-d9e6-30e1-bc13-d2932720005d.roa (raw, json)
Hash identifier:          mx2+P3IjIpI81+pKAp+HqKT8q9bJ/sudwGV84uXv6ko=
Subject key identifier:   C3:86:12:79:3D:99:D7:76:BE:74:92:00:30:54:3D:FD:32:0F:96:AA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458320A01F632ADF27C14F8C20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa
Signing time:             Thu 11 Apr 2024 17:02:42 +0000
ROA not before:           Thu 11 Apr 2024 17:02:42 +0000
ROA not after:            Wed 10 Jul 2024 17:02:42 +0000
asID:                     16625
IP address blocks:        96.7.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:83:20:a0:1f:63:2a:df:27:c1:4f:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 17:02:42 2024 GMT
            Not After : Jul 10 17:02:42 2024 GMT
        Subject: CN=464cad12-a562-4fd5-92d4-ad65900fc3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:11:58:04:59:cc:fe:76:94:0c:a6:57:ca:
                    c9:27:15:98:f5:50:bb:3d:c6:07:ee:1b:b6:13:10:
                    80:bb:77:2f:cd:f5:a6:c2:68:8b:76:67:3e:5b:ac:
                    9b:09:f9:87:3e:04:df:b6:29:24:a8:f8:98:3e:ea:
                    7c:8c:55:05:ee:1c:a5:1a:59:4a:8e:1b:99:87:a1:
                    44:00:c7:4f:a8:7c:01:52:ba:75:83:d9:ff:b5:dc:
                    14:87:ce:e3:84:b0:0b:12:bb:b8:ac:60:b0:e6:4f:
                    9e:bf:7d:fd:6b:73:c6:a8:24:07:6e:53:23:18:be:
                    36:c5:8e:21:22:5a:3d:49:43:c9:e4:1d:c7:f6:cd:
                    14:6b:b9:f8:51:d3:f4:10:75:55:26:5d:a6:0a:71:
                    ac:7a:11:c3:33:85:24:0c:46:cd:06:bc:4e:44:9f:
                    94:53:87:0c:7a:51:20:cc:8e:be:1b:e0:00:27:1e:
                    0d:ab:d7:ce:aa:05:85:90:7b:71:ba:21:1d:b8:91:
                    36:90:ab:96:12:88:1f:8f:9b:3d:40:43:94:a1:5c:
                    e5:b2:71:d6:d2:7d:77:6e:89:f4:bb:77:59:bd:02:
                    c9:a8:5d:51:50:f8:a6:c8:74:c4:5e:5d:47:02:52:
                    78:ff:fd:6c:e3:29:99:f1:1e:8d:33:ea:1c:e0:ff:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:86:12:79:3D:99:D7:76:BE:74:92:00:30:54:3D:FD:32:0F:96:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:fd:83:aa:c8:77:74:66:79:e9:da:25:98:3a:52:9e:30:
         b6:d3:89:ec:71:92:30:ca:cb:6f:01:9c:05:b5:45:68:15:26:
         41:04:6a:54:5c:bc:48:1e:11:da:4e:b9:c6:53:97:d6:b4:c4:
         f4:4d:00:84:86:dc:a0:9c:1f:ac:54:b5:c5:3c:c6:7c:ea:46:
         7b:33:6a:99:ef:70:88:fc:98:9d:b6:14:d9:ae:c1:26:2d:b4:
         41:e5:bc:77:0a:c5:bc:f6:3c:98:39:58:e0:de:8a:e8:85:61:
         79:61:6c:54:08:1d:be:44:cb:6a:cc:3e:be:ca:dd:fe:0c:56:
         7d:12:64:bc:e3:78:6b:02:43:36:2b:09:d7:2c:81:4a:66:7e:
         85:86:95:da:04:8f:87:47:45:cb:ef:fa:d0:c6:0b:f4:22:8a:
         3e:b7:c9:c6:a5:34:10:8d:c5:8a:0e:9f:e6:e2:82:f0:e9:2d:
         08:f2:09:a6:92:d4:d8:99:17:bd:1b:a0:34:62:34:c3:46:36:
         ad:cc:2f:b0:f2:d7:4a:ca:5b:16:84:a1:e0:4e:80:42:dd:e3:
         95:6d:7c:8d:b0:c7:8c:78:77:78:87:c5:94:45:98:15:55:6c:
         0d:4a:db:dc:cc:7a:95:4f:6e:c5:81:f1:d1:79:64:89:4b:e2:
         08:ec:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:21 2024 by rpki-client on console-ams.rpki-client.org