Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa
File:                     6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa (raw, json)
Hash identifier:          tl1bz/yVBv3B//UIO7gnfm9lgxnImTx0ikeNa5gEKdc=
Subject key identifier:   AE:EB:E6:01:27:65:BB:BE:9E:E2:49:E4:18:A5:74:FD:25:65:C2:D3
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858457FDDC7A497D4CCDF6A61D600
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     16815
IP address blocks:        67.217.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:c7:a4:97:d4:cc:df:6a:61:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=2ca1332b-8bbe-4e5d-aa14-84946bb67401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:ff:30:4e:e7:12:d6:33:22:c3:c9:0c:94:
                    5d:a5:e3:ee:da:92:2a:38:82:73:42:59:ba:4c:49:
                    1d:02:60:67:14:04:f4:77:00:98:fe:69:eb:c1:3d:
                    a9:12:c3:d7:50:f4:bd:c5:df:d1:e3:49:ea:4a:25:
                    7f:00:cb:42:bb:62:27:79:63:f6:9b:0c:df:b4:5f:
                    61:6c:c7:67:1d:ba:dc:08:f8:91:19:b1:2f:98:46:
                    52:f4:d8:4f:3f:e8:d7:86:d7:89:10:6e:da:38:df:
                    33:49:2d:a0:10:81:91:37:b7:7a:54:2a:14:22:c6:
                    5e:39:02:0b:d7:e9:65:93:a3:25:32:61:fd:ac:40:
                    16:e4:0a:3a:4f:39:6f:d5:db:44:45:55:25:8a:f4:
                    3e:ea:dc:76:a7:51:ad:87:ee:dd:82:9c:05:4f:c3:
                    b7:08:37:26:a6:bc:27:fb:3a:dd:c8:16:bf:07:51:
                    55:2e:78:fe:5e:9c:87:f9:79:8d:a2:3d:2c:2a:87:
                    3c:6f:4d:c2:c7:63:e0:f4:db:38:e3:36:13:c0:33:
                    5b:58:61:1d:91:a3:62:62:be:a4:72:e3:d1:6d:ba:
                    64:2d:95:38:ba:dc:62:b2:94:17:7c:3f:1e:10:4d:
                    d2:43:06:1f:68:a3:86:9f:61:1f:8e:7a:12:2e:30:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EB:E6:01:27:65:BB:BE:9E:E2:49:E4:18:A5:74:FD:25:65:C2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:39:41:df:7e:13:e2:cf:fb:d0:4c:6f:db:af:a4:dd:f1:
         00:22:27:d3:2e:61:0d:7b:95:b1:18:bc:c8:80:11:c6:5c:cd:
         7d:93:69:99:fd:e6:25:40:4b:43:63:3c:4f:64:e5:a9:9f:b0:
         15:39:03:fb:f3:2f:cf:dd:53:8a:57:ca:56:74:49:3e:08:66:
         b5:55:e1:ca:1a:92:00:7d:b1:25:1c:f3:8c:a5:0d:c1:3d:e9:
         db:c3:25:3b:d1:e0:e5:60:2e:b2:9f:9d:60:a6:57:93:f5:a0:
         76:73:df:ef:d3:fb:0a:e4:f6:33:b1:2d:5f:ee:d5:39:ae:84:
         17:1f:44:4c:ea:dc:8d:b8:51:92:4c:a3:44:b8:6e:bd:00:ff:
         ad:a2:24:46:4d:f3:37:9f:c3:79:a0:74:9f:6d:6f:e1:99:6f:
         f9:e2:59:67:17:ec:bf:ad:c6:01:95:bf:83:68:2b:0d:41:0d:
         81:bb:c4:b6:69:9e:d9:6e:1f:af:3a:59:e5:e4:7f:7c:dd:e4:
         18:04:0e:a4:06:78:79:de:72:d2:73:ec:fe:a1:60:92:ac:7c:
         4e:e8:6e:d4:72:42:3b:bf:a9:a4:1b:36:67:43:d6:01:69:b6:
         99:e2:b6:1a:fe:3c:ec:99:d6:b5:e8:0a:9b:14:70:28:82:55:
         28:99:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:52:10 2024 by rpki-client on console-fra.rpki-client.org