Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa
File:                     17081104-1472-3424-a75e-699ec47d4f30.roa (raw, json)
Hash identifier:          oqrxbsLT7uyhHVNMfMf9Nrt9qdUKQd6rZVP7I8q1U38=
Subject key identifier:   FE:38:96:03:03:31:75:E3:1B:87:6E:63:E0:60:63:D4:3E:EF:2E:9D
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858456C5318621ED16FBEF7705320
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     27552
IP address blocks:        198.160.62.0/23 maxlen: 24
                          198.160.60.0/23 maxlen: 24
                          216.93.240.0/20 maxlen: 24
                          208.118.224.0/20 maxlen: 24
                          199.114.248.0/22 maxlen: 24
                          2001:4830:100::/40 maxlen: 48
                          2001:4830:c000::/36 maxlen: 48
                          2001:4830::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:18:62:1e:d1:6f:be:f7:70:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=a73d12f1-d6cb-4dd7-9400-41378fd6878a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:9c:66:13:b4:83:78:58:0e:dd:02:8d:62:
                    9b:29:df:79:4f:e6:60:30:79:c9:c5:f3:6f:a8:51:
                    6c:1b:98:1f:5e:98:26:19:8f:d2:a5:e7:cf:d6:e2:
                    3f:e2:f6:79:ff:85:96:3d:61:52:8f:56:6d:91:93:
                    d1:c3:42:39:10:97:c0:06:32:e6:64:ef:41:ce:8f:
                    4e:bb:ab:9c:3f:11:e6:ab:d2:64:1f:42:a4:41:df:
                    88:81:7d:28:9f:65:b3:d4:fd:ef:60:37:ca:67:2e:
                    92:95:ff:8a:f7:68:c9:ae:69:04:76:4c:a3:f9:72:
                    bc:b6:8a:bf:9f:02:c7:b4:d6:49:3d:e3:42:16:72:
                    45:29:2f:f7:1a:31:92:46:33:0e:5c:2b:82:0e:2f:
                    95:08:8f:77:5e:73:ab:f2:d5:bc:b3:ad:e8:38:d7:
                    67:48:3c:26:66:9b:e8:1e:ad:3f:1c:c2:19:e7:57:
                    fd:28:32:85:ec:7a:96:d2:a5:61:dd:16:24:ef:23:
                    ab:ff:0d:be:83:dd:86:82:5d:1f:2b:14:f9:13:c1:
                    46:6e:5c:31:a4:28:a3:d3:08:33:e7:2a:7f:86:42:
                    16:1d:55:40:ab:db:b0:a9:55:85:51:a3:8b:5a:49:
                    fa:24:a8:8a:c2:11:8b:1d:70:98:34:53:86:f0:9a:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:96:03:03:31:75:E3:1B:87:6E:63:E0:60:63:D4:3E:EF:2E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.60.0/22
                  199.114.248.0/22
                  208.118.224.0/20
                  216.93.240.0/20
                IPv6:
                  2001:4830::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:95:89:20:a0:1f:a5:83:3f:38:6d:c0:00:6b:cd:a5:57:17:
         0e:f7:bc:a9:42:44:1f:9a:21:90:f1:1b:b9:4a:df:66:0e:e4:
         64:c0:49:3f:e2:e4:9d:93:92:c0:0a:4b:39:fd:66:6d:a9:a2:
         53:b0:f7:94:0f:f0:70:94:be:d2:d8:c0:f3:01:3c:9b:22:e9:
         e1:64:93:cb:06:37:dd:ea:e1:b5:92:7f:2e:12:0f:28:7c:cf:
         4a:ec:93:57:f0:8e:78:20:9f:8a:6a:fa:20:2a:a7:01:a0:6b:
         bf:10:87:bf:19:e9:fa:76:9e:d2:f6:d1:07:37:3e:20:e9:6f:
         11:c7:a8:33:41:f6:85:2c:b8:cc:ea:e5:e4:3d:e5:05:ab:37:
         4e:25:7c:a2:e0:b8:71:47:e8:aa:d3:e4:42:71:46:43:c3:b4:
         4c:0c:3e:9d:3a:8f:a7:05:5e:14:5a:1e:7b:7c:80:ea:06:f8:
         7b:0c:32:1b:5a:88:89:b3:3d:7e:08:55:6e:69:a1:bd:04:98:
         33:17:bd:2e:31:20:da:2f:f7:f1:b1:43:31:95:4b:b7:77:6f:
         53:5c:85:2d:03:25:64:d2:88:5b:7a:02:0e:44:96:14:55:50:
         76:86:ad:df:0f:45:c4:58:2f:6d:39:77:f8:1f:cb:90:c4:19:
         20:7b:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:38:54 2024 by rpki-client on console-fra.rpki-client.org