Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa
File:                     1430f3c1-f33e-37b7-bb23-f992b8030c49.roa (raw, json)
Hash identifier:          nXdEO3cYeIzHcSGOneRR7n0/lRPyI2ZSA1S9hL7X3PQ=
Subject key identifier:   79:52:D7:5E:60:26:5B:29:A1:C2:23:C8:04:4D:3A:10:A0:90:18:3A
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F432858453E42A6E61D91080BD09C07C0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     399533
IP address blocks:        208.64.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a6:e6:1d:91:08:0b:d0:9c:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=df859e23-3bd1-4b28-9e8e-6354b6947599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:75:37:66:16:fe:14:34:63:45:a9:56:69:
                    20:d9:12:18:eb:32:24:a1:39:16:23:d0:7c:81:46:
                    80:63:46:b2:df:9c:ba:92:2a:8a:0a:9b:2c:17:6f:
                    29:f9:87:a3:87:01:89:2c:b3:4f:86:a8:a5:d8:e7:
                    00:40:41:89:b0:df:e2:36:0a:a9:dd:43:1b:12:67:
                    76:49:cd:37:64:b7:99:70:ac:f0:00:c9:4a:ab:3d:
                    88:49:a4:8f:57:36:03:4d:3e:a1:f7:c1:73:f2:c9:
                    f5:be:d6:d6:90:cc:7d:a6:f0:7f:f3:8e:67:85:1f:
                    f7:c3:9c:c3:72:46:56:ee:cd:8f:8b:38:92:1f:20:
                    5e:c7:56:05:15:49:f7:60:fb:e7:de:af:dd:a8:ac:
                    97:6f:21:3c:58:d0:d2:0b:db:f1:c2:ba:ea:5c:7f:
                    57:85:a8:39:9f:89:f9:05:a8:d1:74:0d:67:40:84:
                    22:90:65:e9:3c:d6:07:65:95:14:08:0c:3e:36:a5:
                    68:6a:ea:b4:93:e4:18:59:2d:5e:6b:eb:8e:f6:51:
                    37:21:59:e9:0c:98:c9:9a:dc:07:c0:a7:d2:98:9a:
                    a4:0a:08:2f:5d:92:7c:b8:2e:05:8e:24:01:a6:7a:
                    98:60:f2:c8:f1:f5:c3:fb:ce:e7:58:5b:31:d9:bb:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:D7:5E:60:26:5B:29:A1:C2:23:C8:04:4D:3A:10:A0:90:18:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:92:3b:c0:1f:11:aa:86:94:76:85:e6:24:b9:28:76:0c:
         17:0d:ad:a1:53:aa:52:23:f9:e6:b9:11:5c:a2:2d:2a:3d:b4:
         5a:79:08:5e:57:f8:c0:15:b3:ff:0b:c9:56:fb:aa:2e:35:7e:
         34:95:81:fa:2c:98:d6:d4:7e:da:82:31:0a:76:c0:94:55:57:
         93:bf:c3:50:19:f3:b7:2f:a1:86:b1:36:d4:7b:8b:a9:ad:d9:
         39:c6:e6:63:d7:2f:14:a6:53:56:f4:92:08:b3:70:ae:a4:6a:
         1a:7e:87:df:32:9a:99:da:41:8f:20:7a:ad:f4:43:dc:10:05:
         ee:ea:50:85:9e:a5:f4:17:b7:62:34:01:d0:74:8a:a3:01:4d:
         89:52:a1:b1:f6:7b:13:93:6f:a8:c7:f7:6d:05:c0:f7:65:56:
         46:40:20:5d:44:2a:b3:c8:f5:cb:c3:1f:a1:3b:ef:62:80:42:
         36:a4:2d:4e:75:3a:8a:d4:88:c8:71:b2:93:cf:15:07:d0:79:
         09:05:23:18:09:bc:93:0e:48:89:c8:8e:b2:b3:a5:95:cc:d6:
         84:83:bf:fe:dc:58:f0:56:0d:d8:aa:66:82:3c:cc:3c:af:ff:
         13:1e:a7:e4:e4:71:06:0c:22:79:bf:c9:f0:96:e9:f4:c6:c5:
         0e:8d:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:05:53 2024 by rpki-client on console-ams.rpki-client.org