Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/4e0e1e56-759d-3b1b-b076-32bed8de7ee4.roa
File:                     4e0e1e56-759d-3b1b-b076-32bed8de7ee4.roa (raw, json)
Hash identifier:          /S5lwAlBJG1EicEh04hvW0n5MN1vdeHS/KS7gzh5O3A=
Subject key identifier:   22:63:2F:A3:61:8D:9A:C4:C5:35:AE:FD:9F:A9:B9:54:9E:B3:3D:5E
Certificate issuer:       /CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
Certificate serial:       010D0C9F43285845068AC956EE611D13C3049900
Authority key identifier: 3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/4e0e1e56-759d-3b1b-b076-32bed8de7ee4.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        198.179.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c9:56:ee:61:1d:13:c3:04:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=7061cae3-877c-430c-9c8a-a442de368727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:ec:c5:70:bf:5d:72:ad:f9:19:c9:87:42:
                    6f:2d:9b:0a:3b:cf:40:f5:ac:4b:2c:86:23:53:1c:
                    cc:6b:a2:a8:ff:17:60:0a:bb:e8:30:8c:38:7d:54:
                    0a:57:67:de:af:0b:21:65:30:7e:26:41:0c:db:a8:
                    9e:5e:eb:03:50:54:ab:ea:bf:e5:2c:4d:2c:44:b7:
                    d1:c1:cc:2c:b3:c1:cb:5f:eb:2b:bb:96:92:f7:7a:
                    74:1f:0b:33:9f:c5:d4:cd:d8:85:49:f9:9c:fe:fe:
                    5f:fa:47:1d:e8:fa:6d:d8:6a:7d:d0:37:35:fc:4a:
                    67:b5:f9:fa:a6:e5:8f:47:c1:d6:59:d3:ab:48:54:
                    96:e7:9b:54:44:1b:0a:ec:73:d1:a9:df:14:66:ce:
                    7a:98:05:da:a9:4f:ad:a1:96:67:55:96:e0:6c:89:
                    63:74:d6:09:21:b0:e2:61:89:74:04:d3:49:b1:23:
                    9d:93:06:97:cf:64:fd:30:97:d9:5c:24:fc:50:93:
                    fc:f3:e1:9b:26:29:97:1d:56:31:30:28:e6:88:9d:
                    bd:3d:c2:f5:51:0c:86:2e:39:ac:61:a6:f4:47:9c:
                    02:bb:17:f1:2b:f2:05:1c:37:cb:eb:6b:2d:02:16:
                    97:d9:06:8b:26:00:2e:7e:b8:c0:a6:02:01:c6:19:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:2F:A3:61:8D:9A:C4:C5:35:AE:FD:9F:A9:B9:54:9E:B3:3D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/4e0e1e56-759d-3b1b-b076-32bed8de7ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:c4:22:7f:a9:8f:e4:2d:a1:d2:01:19:58:3e:b8:e6:9d:
         08:35:9c:8e:74:4a:59:be:1d:0a:83:0b:ca:a7:6a:8a:2c:ca:
         fe:16:3a:94:fc:07:9a:dc:4e:8f:c6:e7:0d:9f:b3:d9:14:49:
         57:7f:eb:99:cc:3c:6c:75:1e:4d:73:eb:09:6c:04:8d:43:6d:
         78:35:9f:48:c7:3d:30:a8:1f:4f:19:80:ab:3a:2b:b6:6f:74:
         06:af:45:ee:f1:69:ea:b8:d9:8c:f0:dd:a6:e1:bd:47:88:2b:
         c5:5f:94:03:68:39:0d:4b:94:5b:6e:f6:df:7d:2e:86:3e:06:
         b3:6f:a9:5c:43:a0:6d:23:d0:2b:c9:f3:a3:5e:72:35:29:90:
         66:3d:ee:01:79:e4:37:f5:ba:14:fa:f5:a1:ee:7e:4d:f6:3c:
         d7:16:cf:9c:39:10:66:a2:dd:60:6a:80:fa:d2:dc:0b:50:52:
         68:80:fc:5f:e7:df:49:4f:85:63:fd:23:40:56:bf:27:98:42:
         d4:e7:f7:97:0e:da:14:5c:9f:94:09:7d:e1:aa:fa:e5:69:76:
         40:1b:25:15:ab:b9:4d:32:33:03:ee:5b:6d:c3:43:e7:25:ca:
         4f:6e:3c:b6:00:99:77:85:17:79:be:7a:77:92:ef:e6:07:cb:
         a8:e4:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:56:58 2024 by rpki-client on console-fra.rpki-client.org