Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa
File:                     bdd1e53f-ea79-38c5-a815-0d055865f047.roa (raw, json)
Hash identifier:          jm3SHRPmkhEZm6i932Kvg4xUMUCVwARWPwWdbItyWII=
Subject key identifier:   8A:BF:21:80:D2:6E:AA:22:E6:EA:0E:B4:07:D0:A3:58:48:47:4B:04
Certificate issuer:       /CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8
Certificate serial:       010D0C9F432858456C530ABB34890CB47AC90540
Authority key identifier: BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     4181
IP address blocks:        134.215.0.0/16 maxlen: 24
                          204.246.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0a:bb:34:89:0c:b4:7a:c9:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e1add2ef-41ed-41a9-834c-e6f3b883801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:c0:79:8f:5c:b0:74:25:29:e7:5d:77:5b:
                    f2:29:d2:b7:c8:3f:70:db:aa:f4:6f:a5:83:71:11:
                    8a:09:ff:df:89:88:14:2d:f0:67:82:3e:ef:4e:30:
                    08:07:1c:72:68:ef:e4:b7:e8:9c:8a:56:ee:d4:92:
                    39:e4:9d:11:ab:06:b7:56:14:e5:82:f4:7c:06:a0:
                    3a:34:bc:9c:5b:17:83:2d:ab:68:92:c2:97:89:2c:
                    9b:eb:d1:51:a2:3c:c3:35:b4:4d:e1:20:68:09:f4:
                    34:47:c2:0a:70:07:ad:3f:2f:70:a5:11:8d:fd:b3:
                    3a:b8:1f:05:82:71:6a:c2:d6:d7:f3:d6:7e:03:44:
                    c2:cb:34:ff:ac:04:99:7c:bf:42:0e:81:c7:ab:4f:
                    a4:d1:35:40:e9:8e:97:d7:01:5c:6d:60:e2:32:47:
                    96:48:d8:e8:4d:34:99:71:cf:4b:f7:4c:e4:c8:6c:
                    33:fd:44:cb:d3:cd:4d:03:b0:6c:22:48:9b:51:c5:
                    11:23:d4:45:87:11:15:14:e7:f0:11:6e:16:41:83:
                    10:fa:74:2e:90:7c:9d:f0:e0:5b:2b:79:76:d0:8b:
                    9d:3a:1a:1c:95:f9:08:9f:bb:12:3f:e1:67:b8:85:
                    52:a3:20:ba:ce:01:d6:ec:be:5b:aa:62:eb:e8:44:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:21:80:D2:6E:AA:22:E6:EA:0E:B4:07:D0:A3:58:48:47:4B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl

            X509v3 Authority Key Identifier:
                keyid:BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.215.0.0/16
                  204.246.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:5a:ae:f6:53:12:e4:cc:93:b3:4a:be:cc:80:57:55:be:
         73:3e:44:e1:00:e8:72:e6:49:f5:ac:7b:79:90:75:1f:cc:b7:
         14:ae:48:5f:58:f5:3e:fb:0c:5b:65:53:6f:67:8c:54:11:83:
         a9:a7:bf:70:84:c0:ff:6a:d0:89:8f:f6:0a:a5:8f:e7:bf:3e:
         25:e6:ca:bb:4f:46:41:72:47:9c:12:62:cd:4f:35:4d:4d:67:
         25:8f:90:d5:19:6b:f7:ad:38:af:af:55:fb:98:0f:f1:39:d0:
         46:b9:d6:9e:6d:3f:17:16:34:6c:ca:b1:19:90:d6:45:bb:45:
         88:f8:d5:62:29:ec:25:3b:b0:7c:b1:55:6b:44:0d:0c:68:e7:
         eb:0a:7f:66:7e:2a:b2:c7:e4:82:ba:82:91:a7:bb:3c:a9:70:
         47:87:f1:e8:01:7a:a3:4f:93:91:86:47:6e:ee:6d:73:90:50:
         48:54:52:ef:34:e1:d3:46:d7:0c:bf:59:c4:12:79:74:57:3e:
         6c:48:71:ed:4b:fc:96:a3:d3:05:74:79:6c:83:59:a6:1b:02:
         96:79:8e:63:cc:79:ad:9a:b1:e8:95:16:7d:35:6f:0f:90:1d:
         4e:50:97:4e:de:8a:db:b5:fc:ca:d9:47:5f:8d:77:08:82:52:
         95:30:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:24:56 2024 by rpki-client on console-ams.rpki-client.org