Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8ccae72b-204a-3bf2-a044-6d1483b08de6.roa
File:                     8ccae72b-204a-3bf2-a044-6d1483b08de6.roa (raw, json)
Hash identifier:          cEZvBeZJEKRW4y165Vb40/2hUzuNBoJZF9eM2QK1zO8=
Subject key identifier:   91:98:8A:48:EE:63:99:9C:14:39:2D:87:16:04:97:F3:F5:62:E5:66
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F43285845BD48E787770225D032494C80
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8ccae72b-204a-3bf2-a044-6d1483b08de6.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        192.35.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e7:87:77:02:25:d0:32:49:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=f06159e9-e1c5-4d7c-8554-ad5c441e8921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:f1:fc:bb:33:4f:17:6d:78:f0:15:7f:ad:
                    27:de:7d:b0:05:d3:bb:33:42:a6:5c:be:8d:c2:1a:
                    b2:5d:ba:30:9a:2c:20:a8:1e:18:a8:74:34:ce:40:
                    21:94:77:24:1b:a0:5e:96:9f:18:65:43:b7:78:88:
                    53:eb:ab:7f:64:03:96:6f:4a:0f:22:13:fd:ad:ec:
                    8e:38:e4:44:6b:20:96:4c:3e:5f:18:bf:fc:cf:fb:
                    ef:08:e9:34:b6:31:85:21:c6:55:30:14:69:59:3b:
                    17:e1:f5:da:57:cc:64:5d:67:89:eb:23:5c:d8:8c:
                    df:ec:d4:b9:e7:4e:aa:34:18:38:8f:14:05:6b:06:
                    d8:e5:7b:f9:6f:74:75:76:b4:1e:42:78:18:50:52:
                    1a:00:74:08:cb:e1:2e:bc:fa:66:57:60:42:34:e1:
                    92:5e:c5:35:95:ab:fa:62:7e:86:d3:e6:a6:60:82:
                    ad:41:5a:39:0a:2e:b0:16:b1:4b:84:3f:24:35:0b:
                    2b:50:f9:0e:31:b8:11:a7:b4:91:81:78:21:74:33:
                    80:c2:56:a4:07:7b:82:a0:0a:67:43:c0:83:96:f9:
                    77:85:3c:4e:f5:d2:9e:58:46:94:7a:13:d8:d2:41:
                    57:f8:ca:1e:ff:39:b6:2e:d8:a6:b1:78:11:d9:04:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:98:8A:48:EE:63:99:9C:14:39:2D:87:16:04:97:F3:F5:62:E5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8ccae72b-204a-3bf2-a044-6d1483b08de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:3f:8f:be:c8:75:da:6a:3c:73:af:51:81:c0:47:4c:37:
         38:82:68:e2:1e:e5:30:41:66:de:15:58:cf:50:62:38:a0:d3:
         e1:9f:6b:8e:35:b7:02:7e:c3:e3:f1:a8:7e:e7:3e:ea:3c:10:
         54:7d:d0:b3:fa:ec:de:58:34:cf:20:8e:44:30:64:31:65:c5:
         3a:08:a0:6f:6a:2e:f1:c4:35:fb:c8:2e:7c:24:90:2f:a3:14:
         fa:0a:ab:3a:d3:45:4d:11:4b:0a:ad:ea:17:51:91:80:b4:3a:
         73:2c:18:30:3a:51:4b:49:bc:b1:40:aa:0a:e5:8d:42:16:c3:
         58:ff:10:4d:7c:2d:d5:d1:a5:83:8c:ad:e5:05:06:31:6e:54:
         cc:66:be:72:bb:44:5a:fb:a5:92:87:63:e3:13:3f:f5:3c:cc:
         7e:79:49:e7:8e:89:f3:aa:7e:9b:58:92:83:2f:ec:5a:34:d9:
         e5:3a:3e:b6:6e:7c:7d:aa:4d:2c:18:88:d9:7f:6e:bf:40:a8:
         06:b6:bf:3c:a9:aa:6c:26:6e:fa:39:b0:d4:87:fc:2d:8c:a6:
         8b:c0:04:d2:23:89:01:59:48:62:e9:5e:a7:6e:68:8f:41:76:
         3b:de:41:4b:5e:f0:79:b0:92:b0:d9:5b:70:72:6a:4d:b2:04:
         d5:0d:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:31 2024 by rpki-client on console-fra.rpki-client.org