Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
File:                     495291d5-df17-3d06-965e-bcc698922d0b.roa (raw, json)
Hash identifier:          QQPXH3KGg9ZSFGmxm5X2BnpNEuKD6bHT+7DRyjlUIn0=
Subject key identifier:   B9:A3:DC:29:B4:8E:D5:CF:FF:89:AF:25:9D:29:40:76:6A:29:CF:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708308421FD95886DDC56A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     0
IP address blocks:        199.170.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:08:42:1f:d9:58:86:dd:c5:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=7887bbba-81af-40d4-a1f8-ab5e9328900f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:cd:29:29:3f:08:c4:64:3d:ab:4d:39:11:
                    6e:21:f4:29:7e:36:ae:8e:3b:96:2c:83:8f:77:7a:
                    1a:93:ce:9c:8a:98:48:cd:03:7e:f1:16:b2:e2:82:
                    a5:00:07:bb:42:0e:d9:a0:0d:2a:55:0c:62:4e:db:
                    c0:85:bc:82:5c:e6:7f:24:2b:c3:6a:10:d9:aa:74:
                    0d:0e:7c:94:d1:13:e6:3f:19:c4:41:b9:d9:fd:a2:
                    f4:9a:ee:8f:75:9d:f5:ac:1a:ee:4f:26:9e:37:5b:
                    18:4c:6e:d1:e0:2c:ee:37:a3:e6:5c:c8:4f:d5:95:
                    cd:5f:22:63:d1:fd:41:5c:46:fd:22:3d:37:cc:51:
                    01:45:ea:41:7d:57:e2:36:a3:e8:f4:48:ac:14:0e:
                    de:f3:03:d1:f2:12:da:7b:53:eb:1e:c8:7d:c0:8b:
                    c3:5d:c6:64:e6:c7:0c:6a:3e:a6:7c:9f:ca:69:c4:
                    04:24:fa:36:7b:33:30:54:b2:26:e5:6a:c5:92:00:
                    20:f4:ca:28:48:be:b1:2e:78:6c:ad:16:b1:58:33:
                    23:ee:06:f9:9f:bf:14:a7:fe:ec:11:ad:48:09:2c:
                    4d:b4:33:ae:75:32:57:ae:00:79:8a:41:aa:10:01:
                    85:5b:72:07:13:c3:0b:7d:4b:53:47:2d:e1:eb:47:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A3:DC:29:B4:8E:D5:CF:FF:89:AF:25:9D:29:40:76:6A:29:CF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:6f:3c:0f:b1:e1:29:2d:4a:52:9b:2e:b9:c6:c4:73:07:
         46:78:6b:cb:d4:c4:30:56:3e:7f:fb:24:38:5b:b9:cd:3f:90:
         a5:de:e4:0e:c3:9c:0c:f3:6b:bf:7a:77:e8:d0:28:91:14:59:
         1d:81:f2:06:02:a8:d3:c3:f8:f6:6a:e7:ba:89:8c:9c:df:11:
         90:be:da:85:54:f2:0d:c5:ba:5e:a8:f7:82:50:dc:86:d6:b8:
         cc:51:af:0c:e2:06:d7:6a:fd:15:64:0d:4f:99:fe:23:4f:ba:
         59:c5:17:b7:48:a9:65:9c:3c:0f:7f:d4:4b:eb:8b:e7:c2:a0:
         e6:9e:39:37:a0:f6:29:5b:f2:eb:9d:e6:12:ab:14:54:cd:f9:
         4d:19:d4:11:20:fa:02:28:f8:2c:86:24:95:a3:02:f0:f4:2a:
         b1:b0:af:41:32:9c:a4:46:b3:d9:f0:3a:58:54:fe:47:a5:d3:
         57:df:f1:ae:8e:d7:94:19:ae:08:88:d9:4d:bf:71:9f:41:f4:
         8c:42:3d:0e:53:c9:8e:b4:81:3d:f6:02:a7:cb:f8:43:cb:34:
         52:ea:8f:33:68:c2:d4:31:4d:72:d7:a8:c1:f2:3d:8e:5f:a2:
         e3:23:83:9b:cd:c2:3a:e4:c1:f0:7b:bf:a1:d7:ff:b8:e0:1a:
         1c:67:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:13 2024 by rpki-client on console-ams.rpki-client.org