Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
File:                     7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (raw, json)
Hash identifier:          hP1ymqzDV/HedsAxDskaj9862CdNf3tExzdXiVUi4rs=
Subject key identifier:   A6:01:E8:C4:9C:5F:E9:D1:99:43:5E:60:C2:83:A6:5F:CE:2B:42:8B
Certificate issuer:       /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial:       010D0C9F43285844F03549309B7FFB70F0582780
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        204.8.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:49:30:9b:7f:fb:70:f0:58:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=4af396bd-f5b4-4c8c-907f-1bfd91b88620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:6b:7d:93:55:cd:8f:8e:67:5e:2b:f5:db:
                    97:6a:18:27:aa:3e:eb:d0:1c:1d:b7:e3:fc:53:d3:
                    d0:14:37:b7:e9:a6:57:47:2e:9c:fa:6a:58:6c:ec:
                    20:df:8a:8e:1c:df:47:60:93:af:41:ff:a6:e5:1f:
                    e1:53:92:3e:c9:73:02:60:a1:b0:d1:9d:5b:a1:f9:
                    1a:b2:52:f9:b2:17:da:26:66:05:a6:1d:a0:f1:a3:
                    2e:42:f4:f6:2d:59:c2:bd:fa:7f:8d:9a:61:2b:22:
                    27:45:2b:50:38:06:af:64:15:a2:0f:c1:7d:15:97:
                    75:21:d8:6a:67:3b:08:f9:a0:16:17:b0:95:37:b9:
                    18:04:d0:90:1c:70:06:69:0d:d4:6d:07:24:60:63:
                    bf:2f:85:23:5b:b8:84:76:39:0d:63:d0:63:4e:80:
                    b9:77:ca:e0:70:4d:84:fc:94:f1:58:41:57:30:47:
                    32:06:e8:01:b7:e2:cf:4a:6e:c5:8b:91:62:15:fa:
                    bc:4c:86:26:8a:53:f3:cc:7b:d0:ca:0c:f7:50:12:
                    ae:0b:30:c4:46:97:0d:eb:a8:a9:92:97:57:a3:08:
                    6a:ef:15:47:d7:9c:6c:c6:79:ed:32:cf:7d:53:c8:
                    de:00:7f:18:12:3e:8e:6e:88:57:e8:4f:6b:d7:61:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:01:E8:C4:9C:5F:E9:D1:99:43:5E:60:C2:83:A6:5F:CE:2B:42:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:79:3d:9b:3a:51:ce:c6:fd:e6:47:4d:ec:24:93:7c:a3:
         58:1c:50:2a:df:22:32:0f:e8:ce:71:0f:b1:11:99:eb:4f:76:
         14:28:52:67:51:c4:10:2a:0f:a4:6b:9a:14:15:c7:31:98:46:
         87:28:b1:e9:ef:1a:84:8b:4c:a4:d4:0d:04:d8:38:e4:3e:65:
         f3:0d:c1:c7:e9:10:57:50:30:9b:38:d3:5e:e7:f1:8d:73:55:
         31:0f:21:66:07:4d:fa:26:9a:ba:c2:21:4d:b2:5e:d1:aa:e6:
         f6:63:5c:be:17:e2:8c:a4:4d:ae:ff:0c:56:91:ef:8a:b8:2c:
         1e:31:aa:1f:d9:c1:42:4a:70:93:d1:3d:9c:87:24:44:07:ed:
         68:cd:bb:1c:58:6b:4d:81:81:4f:ae:dc:6f:02:a8:50:11:f5:
         cb:47:2d:d9:18:ec:09:d2:31:5b:14:3e:56:52:b6:a6:6b:d6:
         97:92:4e:0e:41:74:6a:0c:8a:b8:77:f8:dd:96:04:a1:6b:e6:
         52:67:f1:85:e1:0a:52:88:0f:af:3d:52:23:60:bd:ec:51:04:
         aa:e3:f8:60:be:35:de:f9:6a:02:e3:74:8b:fd:01:74:51:d3:
         15:7e:c8:7f:08:5a:84:6a:a7:7c:2b:17:b7:97:8a:28:9e:90:
         73:26:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:15:09 2024 by rpki-client on console-fra.rpki-client.org