Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa
File:                     527be9a5-3b55-3ed4-97ea-1697964d40dd.roa (raw, json)
Hash identifier:          pLlAz2axUGDsmi668Uv+zSTdGjpSRSf40uZ8wq//GIo=
Subject key identifier:   9E:07:47:9D:DD:73:59:D8:0F:8A:21:8B:0B:89:6F:95:A3:62:62:75
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285845840DC38B288E76E988E46FA0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        67.219.251.0/24 maxlen: 24
                          67.219.247.0/24 maxlen: 24
                          67.219.246.0/24 maxlen: 24
                          67.219.249.0/24 maxlen: 24
                          67.219.248.0/24 maxlen: 24
                          67.219.245.0/24 maxlen: 24
                          67.219.244.0/24 maxlen: 24
                          67.219.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c3:8b:28:8e:76:e9:88:e4:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c36d2bb7-51ef-4424-ba7c-3c133a194dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:bf:54:0d:eb:0a:1a:4a:17:e3:9a:d4:92:
                    09:fa:eb:c2:b0:a4:32:8f:5f:c6:fd:5f:3a:62:8c:
                    43:b5:76:1f:d2:0e:55:c5:cf:89:fd:69:32:03:45:
                    12:f2:dc:72:0c:91:01:c6:73:83:1a:ba:46:bf:72:
                    45:d7:67:16:6e:33:ce:e7:56:6f:b6:e4:a6:0c:3b:
                    c0:6e:49:92:95:4f:55:e5:50:0d:61:e6:91:62:aa:
                    2f:c9:6d:92:42:75:63:05:2a:45:36:81:2f:94:8e:
                    69:47:45:a6:3f:ad:bd:b9:9b:02:98:50:52:53:bb:
                    35:b9:9a:3f:e9:ba:02:43:f7:e5:9a:61:78:cc:da:
                    78:46:50:83:83:0d:93:89:e9:06:cd:d0:8d:85:d4:
                    17:8b:91:72:d1:48:70:05:36:5a:14:42:b8:bb:3f:
                    44:7a:3c:3b:e1:ce:6d:9d:13:04:22:4c:55:05:b3:
                    3a:b3:22:de:5a:16:b5:47:3b:5a:8c:95:8c:58:76:
                    19:99:87:82:ab:25:a7:fd:ad:0b:a9:b7:0b:2e:76:
                    48:d8:d3:0a:d8:f0:22:b9:68:6e:7d:cc:92:c4:3e:
                    b5:e3:8c:da:09:f2:97:5b:d9:48:c2:36:cf:f4:64:
                    d7:fa:3c:c3:23:40:2a:22:62:2f:eb:ff:00:28:8b:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:07:47:9D:DD:73:59:D8:0F:8A:21:8B:0B:89:6F:95:A3:62:62:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.244.0-67.219.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:65:51:dc:ce:71:62:28:b0:82:43:7e:19:53:a2:fe:c0:
         fa:b3:69:1e:92:fe:8e:3a:8a:17:95:60:71:93:37:8e:fe:3b:
         f8:f6:14:68:f3:b8:f2:35:9f:87:f3:50:5e:a2:58:10:91:bd:
         48:27:a9:88:47:11:3c:e8:50:79:83:98:4b:72:2d:d3:28:36:
         d6:35:3b:cd:bd:7e:88:63:01:2b:cd:20:78:8d:a4:e0:fb:20:
         20:b7:30:d1:84:e9:e9:9f:3f:27:66:ce:c3:15:72:03:92:03:
         0e:24:45:38:33:19:4b:a6:17:80:59:ff:43:ee:05:87:b7:98:
         f4:d2:18:86:53:02:00:68:bb:72:b5:0e:05:23:58:92:a1:1e:
         bf:20:16:a8:ac:bc:ef:f9:9b:68:02:53:8e:84:f5:70:dd:45:
         0c:94:b8:c8:79:b3:94:61:0a:5b:8d:c2:fc:c1:9e:e2:79:c0:
         13:fa:c3:db:58:40:db:5d:d6:14:14:da:ce:06:42:2a:8c:12:
         22:79:82:4c:22:a5:78:f1:47:1d:35:7c:6a:ff:72:a8:df:ff:
         0c:14:01:26:47:f8:8b:73:df:24:fc:16:c9:73:0b:18:9a:52:
         11:c5:5d:62:2e:9e:7d:84:9a:b4:fd:5c:c4:7d:e7:44:25:17:
         35:5a:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:59:46 2024 by rpki-client on console-fra.rpki-client.org