Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
File:                     880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa (raw, json)
Hash identifier:          FD+Yqn1PG9Ghvkh0cvGqnZ6vyViubHFkRL0/zK22LvQ=
Subject key identifier:   53:CD:92:CB:97:E7:26:79:92:54:C1:2D:13:71:53:68:90:D2:23:EC
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584566BDAC28CB6C8FFACB262680
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     7224
IP address blocks:        192.111.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ac:28:cb:6c:8f:fa:cb:26:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=cb6423c7-8437-4cab-a52e-5fae8bc9b22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:f0:1f:ba:35:e3:33:ad:19:df:49:5b:b0:
                    91:12:3f:8c:8e:09:52:6d:af:14:9d:89:c4:0b:d0:
                    d2:9a:cc:1a:ad:2d:83:3a:79:08:5c:da:0d:07:46:
                    f8:fa:8b:be:57:f6:6a:9d:da:b0:cf:ce:ed:80:97:
                    a9:26:c0:6a:fe:a2:be:56:d5:1f:22:56:c0:a6:2f:
                    eb:51:11:82:12:54:d0:2f:de:61:9e:1e:ce:d4:0d:
                    b6:9d:d2:b2:f1:6f:aa:a9:22:14:42:2a:17:36:cf:
                    2b:be:af:01:a8:29:a2:7c:42:94:c5:f0:72:5f:a9:
                    be:c5:c9:b7:56:65:01:7d:7c:29:9c:25:d5:17:1d:
                    3e:01:dd:02:43:77:78:7e:f2:0d:e6:60:90:2d:f7:
                    7b:0d:99:f5:21:57:a8:9b:da:80:01:3a:14:c2:03:
                    94:d6:56:5e:5c:25:87:30:8a:d4:e5:03:5c:50:8d:
                    e2:4e:6a:8f:62:9d:a4:d4:d5:85:a0:dd:8e:96:b3:
                    15:b7:f4:e8:2b:a3:dd:a5:1a:58:93:9f:ce:fc:df:
                    fc:b6:5e:e2:9f:45:9b:b9:d6:ac:96:f3:22:b1:6f:
                    ec:c1:d4:82:ea:3a:db:d1:b9:69:a8:9a:92:4b:be:
                    7c:1f:b1:10:3c:dc:35:9a:79:10:a1:c0:30:fa:dd:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:92:CB:97:E7:26:79:92:54:C1:2D:13:71:53:68:90:D2:23:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:68:14:f7:75:4b:55:40:d3:46:98:48:90:6f:b9:31:93:
         68:59:75:37:1b:42:6e:33:fa:a4:e6:9f:73:6b:73:4d:24:a3:
         4d:c5:80:d5:2c:49:7f:c2:1d:de:e1:a6:be:09:48:b9:33:63:
         a7:5b:05:9f:86:9e:ad:1a:44:0e:85:01:54:5f:af:86:41:0a:
         a0:87:df:a1:69:61:18:4d:bd:44:0d:2f:b1:bc:7e:de:10:cb:
         1c:3e:96:07:4f:d5:d3:55:d5:5d:85:d3:93:06:b9:45:01:bc:
         5b:f7:a4:ea:99:99:76:83:5f:b2:c5:24:38:4c:60:ad:9c:24:
         95:5f:94:4e:71:87:83:10:e9:cb:15:50:04:dd:b0:c9:14:29:
         69:4e:3f:9c:be:d6:85:f4:d1:64:5a:9a:e9:0b:76:16:6d:3b:
         c4:a8:1a:7c:b0:da:9c:43:15:c2:2c:85:72:a5:b2:75:e9:13:
         26:22:34:91:a5:1a:6d:f2:47:de:68:cf:86:9b:f5:1a:23:f9:
         14:d6:30:ad:42:a2:e9:cb:80:cb:46:38:d7:d2:cf:a0:b8:91:
         69:9c:11:65:26:c5:5c:8c:9b:c8:5d:62:66:bc:20:35:cc:79:
         8d:19:7d:dd:a5:a6:bd:9b:25:7e:69:44:57:58:53:0c:6e:46:
         04:0d:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 17:58:32 2024 by rpki-client on console-ams.rpki-client.org