Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40870e1f-8444-3acb-ab17-329385e80b7a.roa
File:                     40870e1f-8444-3acb-ab17-329385e80b7a.roa (raw, json)
Hash identifier:          tNUftHAaZjZEQAK/v4Mvhehnz/KAAZLJr5wk+7+cXzc=
Subject key identifier:   24:64:FC:10:38:4F:33:23:29:97:4E:C7:60:E6:9D:0B:C2:29:2B:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4AE453829336491D68280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40870e1f-8444-3acb-ab17-329385e80b7a.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     30048
IP address blocks:        206.47.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:ae:45:38:29:33:64:91:d6:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=938eec25-76df-4045-b98c-8dfbd1823720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:56:e8:e7:f7:8d:1e:78:8f:e3:11:23:75:
                    32:b0:0c:11:3b:a5:9e:53:23:44:e4:3b:6b:20:c1:
                    a3:c8:ad:b4:69:2a:12:8a:26:f6:83:af:d5:ae:54:
                    b7:2b:c1:49:73:cf:64:1d:27:de:a9:2a:c3:2f:93:
                    ee:04:8a:fc:a8:e7:be:2f:cd:fc:14:0c:eb:b6:ba:
                    d4:09:b2:6d:22:56:b2:9a:67:00:80:43:e0:13:2e:
                    e1:78:d2:74:20:64:52:30:3c:4b:51:22:d5:1e:55:
                    b2:da:63:f3:cb:0c:1f:3d:25:65:71:d7:03:db:3e:
                    65:33:53:1f:3b:63:d4:3c:5a:e7:d9:88:d1:11:fe:
                    5a:aa:73:5a:7e:69:9c:ad:f9:49:ae:11:7c:3d:33:
                    02:e8:99:92:37:be:79:55:76:9f:be:4f:c9:47:75:
                    f2:dc:f7:e9:c0:ac:14:1b:11:ca:cf:8b:b6:fd:1a:
                    c6:ab:08:f2:90:6e:50:52:51:b5:9b:f0:76:f5:34:
                    63:3c:49:57:5a:90:67:c6:63:d1:90:8a:49:f1:81:
                    e3:d3:23:4d:fb:14:a3:a4:a6:d0:8e:2a:3a:2c:3e:
                    88:0a:8a:73:bd:42:e6:e3:22:0f:99:90:72:10:ba:
                    ca:eb:a4:52:4f:76:cf:f1:7b:93:cd:93:d7:47:fa:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:FC:10:38:4F:33:23:29:97:4E:C7:60:E6:9D:0B:C2:29:2B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40870e1f-8444-3acb-ab17-329385e80b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:74:3a:76:8c:e2:3d:d2:70:b9:21:94:e2:e8:59:94:01:1e:
         df:b9:39:65:b0:ef:c7:eb:62:10:f3:e9:2c:06:86:93:ad:e0:
         55:94:55:7f:61:7d:99:54:1e:59:28:f7:a0:b5:9e:26:7a:77:
         0b:13:21:ec:d7:08:06:ae:01:4b:be:6e:d6:0f:f0:2b:c1:09:
         6b:73:85:7b:c5:0c:89:2e:df:fb:c5:b3:f0:be:1a:af:dd:36:
         0d:89:ce:e3:78:13:8f:7b:32:1d:b8:7d:11:a1:5f:3f:61:32:
         44:fb:45:10:08:6f:c5:80:a2:5c:7a:b2:c1:0c:5d:92:03:96:
         d6:ef:c5:75:91:a7:55:2e:8f:78:85:f3:41:9a:96:18:6d:29:
         48:1e:50:4f:b0:c8:8e:b4:d8:16:c4:0f:11:a6:8b:39:23:82:
         95:b4:80:9b:bc:30:45:ff:e5:53:54:4d:4d:fc:34:4e:fa:bf:
         87:09:dd:30:57:c7:22:59:75:ff:c6:18:d7:9c:ac:c2:c0:6c:
         30:f5:61:f5:8a:49:a4:29:5f:c9:56:9c:94:5e:c2:e0:36:ff:
         0f:86:e7:5f:30:4d:76:e1:ef:07:c3:36:d1:49:8b:89:c6:5d:
         f6:07:75:2e:80:9f:ca:1f:7b:a9:01:e5:4f:0d:d1:48:cf:f1:
         6b:75:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org