Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3f8d5b95-ad80-3c9e-9ee1-1477bcb439c3.roa
File:                     3f8d5b95-ad80-3c9e-9ee1-1477bcb439c3.roa (raw, json)
Hash identifier:          kgWQPpS4lx8RutZ1nJHuoQkl3CNI9L0l9LqRwSB90do=
Subject key identifier:   83:2F:0A:0B:C7:71:4C:55:5C:D3:1D:DD:2A:86:7E:7F:17:FB:41:5D
Certificate issuer:       /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Certificate serial:       010D0C9F43285845148032E193F8521D507AB700
Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3f8d5b95-ad80-3c9e-9ee1-1477bcb439c3.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     19755
IP address blocks:        162.223.179.0/24 maxlen: 24
                          162.223.178.0/24 maxlen: 24
                          162.223.177.0/24 maxlen: 24
                          162.223.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:32:e1:93:f8:52:1d:50:7a:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=9d851a6c-8a35-4f48-83fc-b8efc6ed0686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:16:46:34:91:09:19:1e:70:89:4a:6d:bf:
                    6e:42:9f:4a:dc:56:48:36:3b:56:97:2a:e8:d3:ca:
                    8c:a8:c9:09:ec:72:61:5e:90:63:aa:74:33:c5:a6:
                    05:33:fe:70:e6:b9:0b:72:65:03:f7:8b:29:c2:0d:
                    ad:6b:04:cb:d3:71:07:20:42:28:d5:0f:f7:c5:c9:
                    2b:d2:a0:d9:b3:8d:87:9b:23:62:c0:19:04:fb:d2:
                    73:69:eb:be:a0:bf:3e:d4:36:f7:6c:7b:b3:b4:9e:
                    fa:a5:ad:f2:44:33:4b:9f:a8:b7:45:39:2b:05:c0:
                    b8:fb:ff:56:62:5a:70:20:7e:bc:4f:a2:e3:93:dc:
                    b9:60:6a:86:4e:c8:93:78:5a:5a:c4:8e:f7:d9:e8:
                    e5:39:bb:a3:18:42:d7:a1:32:5b:3c:af:ea:74:7e:
                    a1:3f:43:0f:c6:35:13:f5:88:19:61:bf:30:46:74:
                    1d:6c:db:13:3f:79:4f:bc:d0:ff:95:e4:ca:e3:67:
                    7e:65:ca:c7:ee:43:cc:bc:1a:15:44:4d:d4:49:04:
                    a0:13:e2:06:66:4d:4f:67:c4:af:c0:d3:5f:75:88:
                    82:ff:a3:e9:fb:5b:df:df:7a:af:26:1f:7e:60:de:
                    49:61:c2:2f:1f:bf:3f:07:2b:4f:e2:c8:d3:93:8d:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:0A:0B:C7:71:4C:55:5C:D3:1D:DD:2A:86:7E:7F:17:FB:41:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3f8d5b95-ad80-3c9e-9ee1-1477bcb439c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl

            X509v3 Authority Key Identifier:
                keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:c2:dc:6b:e4:31:50:66:72:94:96:91:20:54:aa:f2:86:
         55:ea:23:81:6d:7c:b2:1e:55:bd:c4:3e:28:3e:ab:f2:f6:cd:
         62:7f:a9:23:5d:1a:73:b9:ce:d0:cc:67:83:70:44:bd:a7:bc:
         72:92:1d:69:d7:d4:11:40:68:62:58:f9:5a:dd:84:c5:fe:e5:
         ea:df:d1:8e:16:b3:a9:30:ee:0d:96:fd:a1:c9:c6:45:79:45:
         bd:7f:14:7e:f1:c7:ab:a7:62:8f:24:b2:60:95:3d:5e:18:56:
         75:17:39:f2:7d:5a:78:ee:bf:90:bf:89:74:2f:cd:98:15:09:
         84:32:f5:58:2c:95:a9:86:88:ae:cc:47:4a:e9:e6:ac:9d:30:
         b2:63:29:65:b7:f8:2f:c8:62:f1:8a:57:bc:37:03:54:87:74:
         37:6e:11:ef:51:73:27:aa:4f:04:38:b8:86:48:e2:2a:28:52:
         3d:fd:dd:2a:f8:a2:aa:cd:e3:dc:c1:70:d0:83:75:16:45:c8:
         e6:c6:b3:4b:f6:03:ef:a3:b7:92:10:ee:d1:c6:aa:07:c8:63:
         c1:57:77:30:e1:6d:62:6d:90:b9:e3:ae:4e:c2:13:89:6c:bf:
         e4:b5:c2:41:39:7e:fc:ab:e3:37:3e:14:64:9f:60:6b:94:0d:
         f4:4f:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:47 2024 by rpki-client on console-ams.rpki-client.org