Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa
File:                     ff857103-330d-35fa-a2de-54ebb219efb9.roa (raw, json)
Hash identifier:          8uKHPEYv51pugYUeuv44zIAtGZ57cdYXddIaNAOwIiA=
Subject key identifier:   E8:8E:CD:FC:4D:C3:CA:17:6E:87:50:96:89:32:89:68:6E:4B:7B:05
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584589A3238D296E47B4841FB640
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        170.114.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:23:8d:29:6e:47:b4:84:1f:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=17f87a5d-21a1-4060-9abc-a8299758e067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:29:e2:7d:b6:45:1e:0a:e9:7d:ea:83:52:
                    ab:8e:30:46:2f:ee:36:f5:4d:97:51:01:b7:ff:c4:
                    26:69:75:dd:f0:61:3a:ee:ea:f5:ed:dc:c0:5e:23:
                    ce:51:4f:d0:08:ff:f4:ae:3c:9d:b1:89:c6:f3:2e:
                    67:02:e6:13:af:b7:07:77:ad:f7:50:3f:13:37:57:
                    59:75:e4:19:7b:5d:e3:32:e5:7f:35:04:1e:68:75:
                    36:6b:7b:c0:d6:e4:91:82:98:58:38:df:da:67:7c:
                    3e:33:bd:44:1e:89:d9:6f:7b:a6:44:d1:e6:70:dc:
                    d0:c4:c6:38:12:6a:78:8a:77:79:e1:7b:3a:99:02:
                    76:c5:60:02:59:84:b7:62:d5:1f:42:8a:7c:f5:69:
                    b0:78:b3:80:b2:fd:8c:f9:35:01:f9:d8:63:a1:56:
                    ce:21:ac:58:64:c5:76:6b:41:15:26:b0:22:d6:0e:
                    81:14:fd:d0:7c:f6:87:57:be:d8:05:a5:46:29:95:
                    c3:1e:96:be:ef:be:1e:ce:9e:17:f4:cc:a8:6d:2e:
                    9d:1c:a2:a3:a1:5d:af:f2:35:9b:8c:29:12:98:2a:
                    57:d2:79:41:6b:e4:33:19:36:56:2b:c3:05:e6:8f:
                    5b:c1:99:2e:2a:22:77:29:38:70:a2:15:99:0e:3a:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8E:CD:FC:4D:C3:CA:17:6E:87:50:96:89:32:89:68:6E:4B:7B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:ab:db:b0:c5:91:45:c2:92:08:cc:9c:01:21:8f:33:aa:
         33:0f:23:8b:90:fe:24:e4:52:7e:b0:6e:ff:6f:c3:23:09:be:
         d2:ba:93:9d:55:1a:99:0f:70:0e:5c:f5:85:8e:82:5b:7d:ba:
         94:a3:16:50:ac:5b:70:49:56:3a:55:a5:15:85:e0:fc:98:15:
         47:e6:97:8c:bb:3a:9c:29:1f:57:3e:ee:6b:ca:ce:ba:b8:53:
         ba:03:65:62:7f:f7:86:92:3f:24:c4:d0:9c:35:bc:4b:62:dc:
         0d:25:b3:3c:f9:1f:de:62:58:fc:f2:1d:cf:b9:ba:fd:29:7b:
         ab:15:fa:77:e9:4b:1d:65:da:ca:83:b3:0d:f3:cc:ec:84:41:
         e6:f5:04:e9:5a:0a:14:62:9e:29:c7:65:12:71:47:9f:ed:09:
         3a:6f:b3:6f:af:74:ca:29:17:3c:ff:69:75:37:fc:47:d3:37:
         df:72:c9:78:14:5b:7b:34:d0:d8:00:d3:f3:94:73:8e:5a:06:
         39:6d:78:0c:b0:b3:c9:0f:c2:74:2b:d4:89:dd:f7:bd:a7:fe:
         67:7c:7d:fc:fe:ed:27:9e:7b:d7:80:b8:f6:6d:a4:09:b1:e0:
         22:e8:7c:db:10:d1:38:d6:15:bc:6b:fe:31:ca:32:12:fc:7c:
         40:ee:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:09 2024 by rpki-client on console-fra.rpki-client.org