Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa
File:                     80c9c456-c754-3368-96d1-77ff871e420c.roa (raw, json)
Hash identifier:          mVMAAguXM4YN6OsPx4phx+AphhVT3x1adFkL7vSNIIw=
Subject key identifier:   F5:48:A1:76:D6:D9:F6:EC:12:39:EE:5F:4D:A9:54:CF:0E:F9:3D:76
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E372177
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa
Signing time:             Tue 14 Jul 2020 16:45:02 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Thu 02 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        199.242.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:37:21:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May  2 04:00:00 2030 GMT
        Subject: CN=cc197371-0671-4194-8ea5-03e0cbd69e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:e0:e9:8e:16:71:76:8a:a9:e9:6c:a8:03:
                    11:98:ca:01:29:ce:bb:1f:f0:88:83:e9:a3:a1:d5:
                    d6:4b:bc:0f:48:60:9f:e2:be:b4:82:60:4d:ad:8a:
                    96:29:ad:a4:3c:67:a8:fe:2a:0c:20:2c:7b:3a:46:
                    2d:ba:01:6f:0b:5a:74:87:0e:4a:51:4d:a0:0b:b2:
                    eb:45:27:a8:99:62:ad:99:a5:90:22:d8:dc:af:ab:
                    e9:8a:89:13:5a:9d:f6:b9:5d:ab:e7:36:a1:24:e9:
                    cf:5d:03:2b:ab:69:be:93:80:d0:0d:59:19:ea:f4:
                    2d:7e:77:1e:ad:65:fc:08:2f:d2:fd:44:02:86:29:
                    b6:98:5c:de:c6:07:1f:ef:59:f7:99:7d:aa:f6:d7:
                    0e:92:a1:3e:62:3d:d0:cc:d2:2f:d1:fe:af:40:80:
                    85:79:86:06:b6:06:ee:c0:95:4a:dc:e3:09:49:9f:
                    c0:74:a2:c3:33:7d:a8:38:00:6e:54:c6:46:14:5d:
                    6a:52:f6:71:88:57:ab:8f:70:6b:d7:39:21:88:9b:
                    67:ab:ee:08:ec:57:76:01:eb:fe:fa:9f:67:37:8e:
                    85:78:e8:ba:e8:87:41:71:65:e6:ed:79:50:7c:71:
                    09:6d:e4:27:06:62:00:2a:49:e7:6e:48:69:96:9d:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:48:A1:76:D6:D9:F6:EC:12:39:EE:5F:4D:A9:54:CF:0E:F9:3D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:4a:29:22:f9:a4:28:95:ca:c8:5a:7a:01:a0:d3:5c:a4:
         b5:2d:65:29:65:3b:78:94:bf:38:25:48:39:f2:c2:5e:5c:bf:
         f9:50:74:05:4a:f6:28:71:af:22:bc:03:97:00:0f:cd:40:a7:
         57:34:30:ff:f8:7b:cc:70:1e:78:01:27:b5:d9:1d:af:03:ca:
         b5:98:b9:d0:4d:ac:63:99:5a:2c:5d:26:17:8e:07:08:7f:40:
         c0:f8:27:f1:b0:7c:79:bb:d5:df:cd:bf:e5:b1:ad:5f:1b:e8:
         92:fa:34:01:92:b3:df:4b:fd:27:bd:3a:a1:64:2f:99:dd:80:
         97:0b:51:65:2a:5b:eb:50:a3:ae:d4:ec:af:19:2e:74:5d:3d:
         ac:37:64:62:d6:10:5e:6c:62:c9:e6:9b:75:fb:ec:ea:7a:d9:
         97:c0:8f:7b:84:a3:0d:de:9d:f5:a2:a9:34:f2:3d:27:f9:f8:
         a9:85:61:9b:7a:2e:1c:4b:b5:c1:72:02:d9:0d:61:08:fe:17:
         68:14:4d:d0:98:39:04:eb:72:2c:35:5d:6f:46:08:ea:b3:e1:
         92:22:9b:42:89:4f:90:57:65:f2:72:aa:da:de:d8:f0:d1:89:
         51:e7:fc:f5:80:33:4d:17:62:c5:49:45:0c:ea:07:60:6d:9b:
         b7:d3:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:29 2024 by rpki-client on console-ams.rpki-client.org