Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa
File:                     d50fa22c-28fc-3c4e-b12d-4de891836c64.roa (raw, json)
Hash identifier:          NVQ6pQtSOteQ9yhtIEaP22k25CnrXGJsnoA8pxZwr0g=
Subject key identifier:   59:3A:F8:1B:2F:42:6D:70:A0:15:20:AF:4C:6B:E4:DE:66:19:29:7A
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F43285845304D388776E5BE6C9D818240
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     400446
IP address blocks:        198.168.122.0/24 maxlen: 24
                          198.168.123.0/24 maxlen: 24
                          198.168.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:38:87:76:e5:be:6c:9d:81:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=240bc324-0aa1-46c2-ae84-c7e08ef2153b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:4a:2e:1e:33:1c:c8:c3:aa:f8:ea:21:2d:
                    74:32:0c:17:21:87:66:f3:76:18:ce:02:31:b8:dd:
                    5d:24:e6:35:61:82:8b:67:b1:02:a2:0f:0d:f6:4f:
                    3b:41:2f:01:c7:83:a8:9f:56:7e:13:df:fd:53:86:
                    86:61:99:15:45:ac:08:58:23:a2:73:b8:53:66:0f:
                    db:93:43:95:6a:7e:b5:c5:c8:43:fc:01:1d:34:e5:
                    36:55:41:af:91:25:24:34:cc:43:e3:8b:b5:e0:6f:
                    0c:a4:0d:5c:28:7b:c6:17:00:93:44:ca:75:79:86:
                    53:4c:cd:5f:49:35:7c:68:75:c7:ea:37:71:c5:64:
                    f4:63:9d:18:9e:20:ec:35:c6:26:82:f7:a0:59:ef:
                    26:34:63:3d:73:4f:39:a3:70:24:9a:37:8d:3b:81:
                    76:0a:e3:c6:5e:d1:2a:95:85:58:c8:a6:76:74:6e:
                    f5:62:fc:b3:41:33:fa:ce:06:96:bc:53:f2:56:fb:
                    a3:99:a7:f9:9b:af:e1:94:ab:06:bf:5a:4e:c4:d1:
                    0e:1e:92:a5:dd:6a:81:f2:d9:e0:3f:ed:ef:09:60:
                    86:86:6b:ae:9e:48:c8:b9:50:58:52:f5:4c:4a:8b:
                    d0:53:c7:f2:c9:d2:67:3e:ed:90:2e:62:8e:4f:5a:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:F8:1B:2F:42:6D:70:A0:15:20:AF:4C:6B:E4:DE:66:19:29:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:72:94:a0:c1:3c:d7:11:3d:3f:76:18:02:68:02:62:73:
         f5:af:c6:cf:53:cb:af:28:fe:e0:d7:54:ad:21:68:41:83:c7:
         f5:83:b8:bf:b3:aa:58:05:ba:c8:df:ff:58:4f:7f:1f:9b:a9:
         53:9b:c4:6f:58:00:a7:04:da:05:7a:b7:34:8c:ac:06:d6:a9:
         a9:6b:60:46:a6:ea:58:97:36:7d:06:40:f9:3d:5b:6b:96:09:
         bb:c0:65:36:09:40:59:b1:7f:e8:ef:55:70:3b:da:7c:fd:f2:
         6a:83:e1:e9:b3:a6:6c:dc:2e:7e:24:ef:88:f0:e9:4b:70:ce:
         ae:87:4e:39:5f:ff:d7:8a:9f:e7:e8:fb:13:a7:b8:d6:56:5c:
         55:e4:70:67:ec:d8:c0:a9:6e:ed:55:5f:62:ba:47:ba:6a:4a:
         b1:c4:c8:25:b6:91:cf:24:a3:e5:12:ee:72:30:73:7d:22:0e:
         f1:90:a8:e3:8d:79:77:46:df:92:97:ba:19:fb:f3:b9:69:3f:
         ab:8b:30:9e:ef:90:35:52:1f:83:b0:6e:1e:11:25:2b:2f:0d:
         25:59:e0:c8:59:50:3d:79:93:a8:a0:25:21:d2:19:4d:7d:80:
         68:af:ec:19:fb:eb:47:9a:ed:13:50:37:52:02:c4:6b:c7:ed:
         7c:2b:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:42 2024 by rpki-client on console-fra.rpki-client.org