Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/2bc02667-df84-3c8f-b64f-2eeb33dbd39f.roa
File:                     2bc02667-df84-3c8f-b64f-2eeb33dbd39f.roa (raw, json)
Hash identifier:          APEiOWw1T4XZyQxnzj3t9hY9hihumWEFi+ujiREAttY=
Subject key identifier:   B5:D1:B5:4B:57:93:73:ED:C8:DC:F0:AC:20:0F:B4:EC:C2:C6:03:27
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F43285844FB289345E1A84A90B2391D20
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/2bc02667-df84-3c8f-b64f-2eeb33dbd39f.roa
Signing time:             Fri 23 Feb 2024 00:08:47 +0000
ROA not before:           Fri 23 Feb 2024 00:08:47 +0000
ROA not after:            Wed 22 May 2024 23:08:47 +0000
asID:                     14618
IP address blocks:        69.64.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:28:93:45:e1:a8:4a:90:b2:39:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: Feb 23 00:08:47 2024 GMT
            Not After : May 22 23:08:47 2024 GMT
        Subject: CN=167cb9f7-5fb5-41dd-9bf3-965f861414dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:fe:c9:6f:3d:45:3c:59:ba:49:6f:7b:71:
                    01:de:04:cd:ab:d7:e6:0f:78:61:b8:f7:aa:e5:2c:
                    91:8b:e2:a0:31:21:71:e4:03:72:6c:ee:c2:af:bd:
                    9c:77:c9:3d:d7:db:a7:73:03:9a:ff:40:5a:5c:3c:
                    95:1e:0c:88:f8:db:54:14:1e:7b:dc:c3:8b:e6:8a:
                    ce:50:d4:c9:ad:8a:0a:d0:bd:a9:91:eb:29:63:6b:
                    e1:0f:6a:3d:3d:19:fd:8f:ed:8d:4e:2d:c3:b2:0c:
                    1d:9c:8f:d7:74:6f:c1:4e:24:54:45:65:0e:00:8c:
                    b3:71:2b:de:69:d6:1f:01:4a:82:d3:00:08:49:6d:
                    f0:18:07:05:a7:67:3f:2b:3a:79:54:cf:85:dd:4f:
                    3d:d0:d5:2b:87:b0:3c:fb:d1:47:0e:3e:8a:33:5e:
                    06:14:ff:54:7a:fd:10:44:f2:24:7e:f2:81:29:56:
                    b8:3d:5f:c7:e2:f9:27:85:6e:42:c5:41:cb:61:37:
                    dc:df:32:e2:89:80:31:10:ba:80:1f:a4:ac:05:11:
                    67:91:99:ec:83:be:86:d0:5c:c5:69:37:7f:47:f6:
                    dd:70:d5:bc:3a:1d:ce:47:3f:e3:2e:3a:a2:6f:41:
                    91:34:3c:b1:1b:d0:03:f7:44:b7:70:95:89:a9:1f:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:B5:4B:57:93:73:ED:C8:DC:F0:AC:20:0F:B4:EC:C2:C6:03:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/2bc02667-df84-3c8f-b64f-2eeb33dbd39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:0f:fc:c3:b8:14:0f:be:f4:9c:86:d5:ae:38:a5:d3:83:
         07:c2:ce:4c:3f:70:9a:ef:4d:9b:83:27:1b:f3:84:4d:b5:b5:
         c6:2c:c3:cf:24:87:2d:a1:c2:bd:5a:3b:51:22:ea:48:97:07:
         47:da:08:a3:e7:83:99:aa:34:69:46:07:00:0f:d9:4c:93:b1:
         1b:4d:ad:12:b2:b3:c9:55:0d:c5:34:7f:a8:52:84:0d:82:b8:
         de:46:8a:7e:95:71:6e:53:87:2e:51:c2:f0:fe:eb:ff:84:8a:
         32:84:73:ce:cc:3b:21:f1:ff:74:8d:3a:fb:54:1b:55:e7:e9:
         19:29:8f:6d:34:40:05:84:63:fd:f6:4c:b6:ee:09:cb:5f:5d:
         4a:2f:ad:92:9e:92:f2:88:4b:4d:99:4b:7f:e9:3f:c9:a6:ae:
         67:81:f3:bf:88:7b:51:b2:1e:aa:01:b9:d0:59:70:4d:8e:e5:
         d5:54:c3:ab:48:d5:45:57:9a:ed:87:b0:ee:c9:26:ea:2a:4f:
         50:0b:5b:4e:2d:b6:ab:ca:7f:69:63:a6:b5:b0:c4:2b:10:84:
         9b:2a:aa:2d:1e:1e:ab:7e:35:26:97:21:76:b7:95:7a:cb:fc:
         2d:a5:cf:2e:66:2b:8d:82:66:43:bf:a3:2b:cb:dd:11:a8:29:
         42:05:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:46 2024 by rpki-client on console-fra.rpki-client.org