Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
File:                     3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa (raw, json)
Hash identifier:          Km+ZFjIThaIzHkjffU5lz3wSeM9PDJa2ke7CRz0eaUo=
Subject key identifier:   B5:C3:23:47:E3:38:3A:78:24:9A:C2:A7:F6:AC:87:7A:33:F0:B2:32
Certificate issuer:       /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial:       010D0C9F43285845C0139546907E332AD35EF540
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     27630
IP address blocks:        67.43.160.0/20 maxlen: 24
                          72.34.224.0/19 maxlen: 24
                          69.166.0.0/21 maxlen: 24
                          208.122.224.0/20 maxlen: 24
                          207.246.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:95:46:90:7e:33:2a:d3:5e:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=b777305c-19e3-44d0-8d69-560f96a42c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:02:ef:05:80:28:9c:e1:13:67:6c:18:15:
                    94:75:b3:22:d7:9f:4b:07:08:57:8b:0d:34:d5:cb:
                    c5:72:c1:e2:16:dd:28:d4:82:5a:25:c5:76:99:44:
                    e0:1b:07:b4:9f:65:ca:ef:e1:ec:7b:27:9d:3e:2b:
                    7f:e1:57:c4:53:98:3a:2a:d4:19:74:0d:86:29:b2:
                    db:95:6b:70:94:7a:50:3a:38:7b:79:b0:3e:12:06:
                    6a:36:0e:47:9a:d8:eb:0f:05:0d:5e:f9:44:6d:bd:
                    6b:6f:01:a5:95:01:b6:54:b7:84:c5:4a:66:b5:11:
                    bd:3b:bd:3f:c9:12:65:5a:b2:32:7c:bf:5c:ff:fb:
                    59:35:ba:5c:1e:f5:96:a3:26:b1:f8:8d:14:01:42:
                    5a:40:d0:3f:bd:e4:15:cb:cd:71:25:96:13:58:1c:
                    36:3e:96:8e:27:3c:a9:65:4a:e4:52:95:b7:37:55:
                    a0:1b:86:73:67:f4:50:37:5a:c5:db:b7:f4:b8:ce:
                    6f:fb:4d:60:fd:00:b0:23:28:e2:2f:80:01:28:ee:
                    57:3e:ab:5a:c9:91:eb:d1:90:f2:51:ec:ec:ee:9a:
                    a4:dd:b8:8f:39:3a:58:60:f4:29:75:8d:50:8c:59:
                    97:96:c2:86:88:81:94:e9:61:b8:6c:bc:48:09:c9:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C3:23:47:E3:38:3A:78:24:9A:C2:A7:F6:AC:87:7A:33:F0:B2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl

            X509v3 Authority Key Identifier:
                keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.160.0/20
                  69.166.0.0/21
                  72.34.224.0/19
                  207.246.192.0/20
                  208.122.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:1f:f4:84:5d:43:09:e5:a3:6e:eb:8f:05:80:40:0e:8a:
         87:e7:b6:89:09:79:e1:62:c4:f3:0c:59:93:ff:31:e7:fd:33:
         b7:fe:c4:cf:4a:9e:da:8e:79:ff:80:da:ce:d2:32:a8:5d:7c:
         ca:b1:0c:87:89:dc:c4:1e:a2:05:b1:04:be:36:58:90:f7:03:
         9d:c8:7e:70:79:16:e1:93:cd:5a:a7:59:7d:b9:e3:b5:be:33:
         7e:2b:7c:da:47:b6:8f:12:51:14:75:b4:07:1c:ce:86:8a:95:
         18:2a:9e:81:ca:32:71:4a:3f:92:f5:16:c4:2d:01:34:7f:bc:
         ed:39:fd:70:e2:ea:5d:42:19:a8:a8:bc:24:9d:f0:ea:60:b7:
         ec:7c:c3:6b:8d:62:fd:3a:c5:59:6c:e5:ff:6e:ec:69:47:bb:
         f0:d3:7b:bd:ed:91:50:e8:72:0f:2d:c3:d1:8a:3b:e7:5c:a5:
         a8:58:96:1f:1b:57:6b:6e:ca:20:c7:53:01:de:db:23:50:0a:
         ff:80:3e:c3:2a:1f:ea:8f:16:17:2e:b5:a9:36:8d:26:b5:0b:
         29:26:16:67:e7:fd:93:ad:57:b2:e3:b2:ea:23:52:5b:b4:95:
         90:16:e1:e5:11:fb:0f:17:a8:f4:60:05:40:c5:d3:d3:ff:3c:
         33:c5:00:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 16:15:22 2024 by rpki-client on console-ams.rpki-client.org