Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File:                     8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier:          dJEQlUkgqqCOBjQWObfKktLmVxhxeeCtjovgoR0UMFM=
Subject key identifier:   A4:B9:30:22:30:E2:5A:EE:2A:02:30:DF:6A:31:6C:09:5D:87:2C:3C
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F432858457D1326ABFDF09EA84F82DF00
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        204.110.221.0/24 maxlen: 24
                          67.226.222.0/24 maxlen: 24
                          67.226.220.0/24 maxlen: 24
                          204.110.223.0/24 maxlen: 24
                          204.110.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:26:ab:fd:f0:9e:a8:4f:82:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=ab858991-7d84-4c0b-89fb-0da6f12d780c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:01:f9:e9:61:e8:bf:9a:c9:e6:80:68:7f:
                    c4:de:7d:4e:03:64:5f:ae:df:18:90:68:41:b1:c9:
                    7f:7d:5a:c3:cb:00:7c:41:74:f5:33:3b:31:19:c4:
                    a6:3a:48:dd:ec:4e:92:9f:fc:32:6b:f7:0e:81:28:
                    da:b3:c9:75:79:9d:bf:9b:49:b6:13:e0:8d:8e:41:
                    83:aa:77:df:c0:8f:bf:d7:82:79:37:54:7c:83:97:
                    a1:0f:6e:62:1c:89:57:8e:2b:c0:5b:4c:b1:29:2a:
                    03:75:22:16:be:bb:77:2e:b7:f5:fa:bf:3e:aa:d1:
                    1e:6d:4c:16:e0:8b:d6:38:f9:4a:18:7f:10:ba:b9:
                    8e:b2:27:1e:88:c7:a9:b0:b8:21:1b:5d:e1:7d:bf:
                    ed:24:48:9c:34:46:4f:1c:f3:d6:a8:86:ab:5c:86:
                    87:1f:19:07:34:9a:b0:5d:b8:79:53:79:76:d3:23:
                    46:a1:96:00:55:59:fd:b9:0d:7c:3a:72:cb:d2:7b:
                    09:7a:79:ec:da:8a:e3:12:29:31:49:5d:f0:ae:e9:
                    60:88:17:d8:ff:88:40:e6:8f:05:2f:ff:55:1d:0d:
                    a1:50:df:10:8c:e1:c9:98:12:1e:1f:9b:4b:3a:23:
                    2e:a9:7d:37:af:b5:c7:64:bd:da:76:a1:5e:c5:60:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B9:30:22:30:E2:5A:EE:2A:02:30:DF:6A:31:6C:09:5D:87:2C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.220.0/24
                  67.226.222.0/24
                  204.110.221.0-204.110.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c8:4f:9a:23:1a:f7:7c:8d:23:1b:0e:6c:98:e4:50:3a:33:
         74:41:f2:a3:8b:ff:91:dc:1c:34:db:9e:05:34:d6:6a:27:36:
         44:93:07:af:53:c4:cd:6b:52:d3:81:0e:d0:05:fa:63:df:a6:
         55:50:ec:a2:dd:49:3d:64:9c:b6:16:5e:13:ba:84:51:fe:a4:
         96:6e:36:b2:04:99:84:ef:1d:c2:23:9f:37:7a:c6:e1:0f:a5:
         dd:72:4b:b1:83:cb:17:e6:55:26:72:ff:ff:42:86:c4:ac:d9:
         67:11:d0:8f:06:99:0e:44:c0:81:8c:1a:15:3a:ab:9e:06:c7:
         61:f5:4a:f6:02:98:a0:da:f9:3d:d3:e9:b0:62:3d:6f:52:82:
         70:a5:85:e6:a0:51:34:0c:42:10:75:11:15:a1:85:c0:66:40:
         54:c1:62:91:7e:18:18:2e:38:60:4e:f5:3e:70:30:57:9f:b6:
         c4:63:63:f2:bb:e0:e5:08:30:4c:9f:e8:93:03:8f:6d:73:9c:
         65:5b:05:39:36:c4:d7:91:6a:97:35:43:12:d2:b8:89:97:da:
         85:0c:8b:f1:5b:99:a3:33:59:1b:6e:15:68:ce:16:0a:92:59:
         4a:f8:3c:88:f3:72:85:4d:22:15:30:b3:29:fe:30:42:eb:4a:
         12:7e:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:59:03 2024 by rpki-client on console-ams.rpki-client.org