Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cbff3509-7a16-3031-b8d5-e836e794be43.roa
File:                     cbff3509-7a16-3031-b8d5-e836e794be43.roa (raw, json)
Hash identifier:          n1H+mupm6BXoMAUB+228aS/PznjJX6Lu2HUx1BbtOfQ=
Subject key identifier:   37:D3:42:82:11:A9:61:6C:D5:EB:42:D9:CB:C4:53:EA:DC:6E:E4:9E
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D360ED5E4070D8A6F7260A0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cbff3509-7a16-3031-b8d5-e836e794be43.roa
Signing time:             Tue 09 Apr 2024 14:11:02 +0000
ROA not before:           Tue 09 Apr 2024 14:11:02 +0000
ROA not after:            Mon 08 Jul 2024 14:11:02 +0000
asID:                     16696
IP address blocks:        147.185.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:36:0e:d5:e4:07:0d:8a:6f:72:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 14:11:02 2024 GMT
            Not After : Jul  8 14:11:02 2024 GMT
        Subject: CN=155c2a64-419d-41bb-881b-b4e34a332d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:43:4f:46:7c:32:7f:d7:b5:ab:a0:48:db:
                    70:d8:b3:d8:6c:c4:4d:9a:21:1a:3b:39:57:e9:7b:
                    89:ec:4f:79:e9:83:53:64:aa:34:9a:50:e2:f6:1b:
                    64:4b:02:f7:76:3c:b3:a8:4a:63:a3:ec:b4:31:c2:
                    64:86:c6:ac:56:99:58:ab:b7:80:c1:d9:3c:fb:a7:
                    c6:89:d7:75:68:39:f7:7e:a8:cc:bb:af:12:75:df:
                    11:ad:5d:37:da:78:93:53:00:f1:45:b5:a1:8c:51:
                    d0:1b:69:e3:64:ff:ba:55:c2:37:f6:c7:31:4d:30:
                    0f:43:ef:8e:db:e4:19:18:d6:48:0e:33:bc:d9:c5:
                    d5:0a:9c:a7:40:7b:8e:d3:13:b0:5b:51:1b:bd:19:
                    00:d4:63:c7:2e:95:b9:82:6d:af:9e:ac:1f:12:75:
                    26:91:76:e8:89:cd:53:45:9f:cb:61:91:e5:dd:16:
                    8d:a9:61:1a:0e:13:35:ca:11:95:a2:a3:bb:e3:50:
                    3a:ee:5f:3b:4b:d6:bb:ce:f7:04:f3:ba:a9:bb:79:
                    db:8b:6a:98:f2:7c:80:7d:9e:76:24:2a:69:84:56:
                    e1:19:76:f4:d6:a3:51:0b:71:c7:7f:9c:0d:02:a1:
                    88:98:15:5f:58:17:6d:02:fb:6a:87:11:7c:ac:26:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D3:42:82:11:A9:61:6C:D5:EB:42:D9:CB:C4:53:EA:DC:6E:E4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cbff3509-7a16-3031-b8d5-e836e794be43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:21:f9:4e:87:05:f6:32:df:9f:31:55:2e:92:8c:92:0b:
         37:0c:2d:cc:2f:e4:79:6a:95:c9:4e:95:98:d0:16:50:34:9d:
         73:cc:22:73:ac:28:65:7e:8c:8f:a5:2e:2d:fb:c2:3f:19:32:
         0b:af:11:99:8f:25:70:7f:e3:d7:18:af:14:80:cc:c6:ef:d8:
         be:26:8e:06:be:13:be:eb:d2:4b:50:0e:e9:af:7a:50:0b:0f:
         a9:69:52:9f:59:f2:d8:97:47:da:65:1a:7b:85:e7:2b:ab:e8:
         6d:79:08:41:7a:50:80:f5:42:7d:54:16:39:94:3c:ca:6b:3e:
         db:8b:15:78:e7:c7:dc:0f:a4:7b:dd:eb:eb:fe:34:06:0b:ee:
         14:54:27:bb:3a:4e:69:e2:65:8d:1b:10:e1:64:66:e6:df:e0:
         d4:d6:a5:cc:b2:6f:a7:08:4e:29:af:a6:06:11:a7:61:b8:77:
         1f:85:d5:71:33:4d:0c:84:81:7a:37:d5:f1:83:3c:08:14:47:
         57:7e:50:7f:57:be:7a:d4:dc:d0:93:7a:a7:51:6f:ef:a4:76:
         8b:99:20:e2:95:2b:a9:d6:d3:c1:36:47:8d:7b:ba:99:33:70:
         07:c0:16:45:66:6e:f7:85:9a:6d:11:28:7c:32:72:01:d4:b0:
         94:c1:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:08 2024 by rpki-client on console-fra.rpki-client.org