Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa
File:                     b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa (raw, json)
Hash identifier:          CCLFiZ37X/UJzsYhq9afNQ8riPx7nm6PKRSAd9OtCoI=
Subject key identifier:   4B:0E:CF:1D:0C:A8:EB:41:F1:85:3E:A4:A8:E6:17:1C:29:65:03:C4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454628328A617D8C2BDB2A7580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa
Signing time:             Wed 20 Mar 2024 20:53:39 +0000
ROA not before:           Wed 20 Mar 2024 20:53:39 +0000
ROA not after:            Tue 18 Jun 2024 20:53:39 +0000
asID:                     15169
IP address blocks:        208.76.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:32:8a:61:7d:8c:2b:db:2a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:53:39 2024 GMT
            Not After : Jun 18 20:53:39 2024 GMT
        Subject: CN=8366ca28-c7f1-43e3-bfd9-b6b586db0bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:23:70:7f:51:5c:53:cd:3f:a1:87:dc:63:
                    d4:d0:98:80:da:05:c6:af:60:c0:88:a7:69:e1:45:
                    f9:44:98:6f:45:89:85:d0:93:9e:a7:8f:42:69:28:
                    38:a6:b1:8f:77:dc:8f:6a:55:87:6e:85:79:98:ea:
                    4e:a8:f9:df:79:26:ed:f5:4a:16:d3:c4:1a:2f:48:
                    94:90:0f:01:4c:16:37:b3:8c:ef:89:89:ea:6f:91:
                    4f:87:94:24:0c:82:a5:2c:e3:81:bf:86:19:81:ea:
                    19:04:e2:d5:10:0b:57:4c:dd:24:9c:10:15:17:de:
                    1f:fe:e5:11:7f:a9:c5:24:1a:24:ed:d6:09:eb:79:
                    db:e1:31:a5:bb:c2:6a:32:54:ed:b4:d0:6b:84:a0:
                    fc:77:45:88:94:1c:c0:2c:9d:4a:57:37:a7:19:a3:
                    f8:e7:cb:13:c3:a7:60:db:9b:57:49:26:76:0d:24:
                    e8:50:8b:3f:c4:84:2b:fb:b6:1a:84:a2:f7:9e:b0:
                    a0:e8:c6:fe:e1:be:7f:bd:2e:9c:21:2b:50:d1:c6:
                    4b:6e:b0:4f:f5:ff:a3:37:59:f5:c2:17:33:39:08:
                    c0:80:5f:d6:8a:a8:92:f2:73:c9:e1:af:55:1c:6c:
                    73:a3:b7:44:5d:22:d6:a4:27:cf:f7:e6:a7:a0:64:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0E:CF:1D:0C:A8:EB:41:F1:85:3E:A4:A8:E6:17:1C:29:65:03:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:83:1f:65:02:dd:f6:68:ce:e7:e2:24:e0:e7:a2:5e:3e:76:
         d9:31:a6:d5:11:84:f5:54:1a:c2:95:01:99:bb:f2:66:4f:03:
         84:9f:28:93:f5:f9:a9:68:56:70:08:04:f7:a3:68:9f:4e:dd:
         2f:49:dc:1a:aa:92:23:21:b3:d6:5c:40:0b:25:cc:66:64:f7:
         14:3d:1a:b6:83:9f:ec:75:28:c2:b0:4e:74:84:9f:f3:a9:bf:
         a0:29:ba:6d:57:57:ff:ee:02:ba:69:92:0f:bb:ad:37:1c:f0:
         51:c6:41:e6:d1:fe:e5:38:16:c4:5b:51:7e:c5:fc:5f:2f:23:
         7c:21:cf:76:40:44:fb:8f:19:40:b1:bb:85:55:3b:50:a9:ff:
         6d:fb:01:a9:bd:55:17:86:2f:1b:a1:6b:06:df:14:39:53:31:
         8d:9b:71:9d:c2:08:0b:53:31:51:2d:53:6e:4b:89:a1:99:99:
         e4:a2:03:cd:32:72:da:11:68:2c:c1:78:74:ee:da:a5:fb:32:
         b1:4a:6d:8a:a7:f4:a0:66:30:a8:a0:92:16:fb:7d:9b:82:ea:
         b5:3f:5e:8f:61:85:03:2a:44:43:84:79:5d:90:2f:27:a7:a1:
         a6:0c:61:e3:3a:cc:d6:1a:25:3e:b3:00:7a:7f:f4:f0:3b:f9:
         51:64:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:20 2024 by rpki-client on console-fra.rpki-client.org