Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/405a0b23-9441-3d7b-80a0-13bc76c33547.roa
File:                     405a0b23-9441-3d7b-80a0-13bc76c33547.roa (raw, json)
Hash identifier:          5R7LJuiipdGq0FQaOtVmycMQKnYCC/72Z1kQnHsNAdw=
Subject key identifier:   E5:8F:C1:1D:C6:14:C7:42:D7:AA:43:24:47:6E:8F:18:62:C2:B6:85
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333397D6D7F22BD76AC84C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/405a0b23-9441-3d7b-80a0-13bc76c33547.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     26284
IP address blocks:        209.83.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:39:7d:6d:7f:22:bd:76:ac:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=b2b4c9f5-4386-4afd-aaad-cf353dfcfb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:a5:47:27:fa:70:08:46:99:ca:9f:19:4e:
                    47:da:78:2b:da:84:0b:26:94:8f:51:f3:cb:e6:f9:
                    e6:91:3d:86:35:fd:0b:0b:7d:10:06:d9:1f:4b:69:
                    59:72:b5:ff:82:cc:79:92:43:bd:f6:b6:63:00:e1:
                    f9:1d:26:70:21:d2:91:bf:ef:24:5d:43:42:5f:10:
                    4f:f6:6f:2c:72:77:b2:af:1d:e8:9c:94:9f:ca:1e:
                    e9:17:b1:59:6e:2b:69:d2:70:23:72:25:8c:da:9f:
                    b4:75:1b:8d:fc:1f:37:14:fb:34:8f:9b:34:e0:c7:
                    99:fe:fc:bc:d0:20:64:c4:fd:86:5d:ba:a6:57:5c:
                    65:e9:78:4c:3a:4b:35:02:76:3d:71:09:39:e4:df:
                    b5:a8:8c:75:d6:08:33:91:bf:8b:1d:0b:26:3d:65:
                    51:1a:cf:df:b8:32:44:ba:b8:e4:1b:03:11:b4:39:
                    d1:d8:b5:9b:24:5b:93:0f:3b:db:84:b9:d8:c5:da:
                    29:29:30:64:9d:74:16:9b:64:78:be:42:8a:22:1c:
                    e6:69:67:d9:b1:a0:3d:82:37:cc:5e:eb:f7:37:d0:
                    99:0a:0d:b2:54:fc:70:99:31:87:36:2d:5e:27:dd:
                    ee:1a:d1:3e:c6:41:a3:93:d4:c3:22:41:26:ff:78:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:C1:1D:C6:14:C7:42:D7:AA:43:24:47:6E:8F:18:62:C2:B6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/405a0b23-9441-3d7b-80a0-13bc76c33547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.83.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:47:2c:ad:f5:bf:b7:bf:1b:60:e4:a2:c5:1a:51:53:15:
         ea:3a:5e:3b:81:b6:c5:b3:eb:1b:ab:4e:3f:00:47:c3:b7:7d:
         20:c3:3e:8a:54:95:80:14:7a:48:8f:d6:41:2d:e3:75:66:f5:
         55:8a:7c:57:d8:ab:1c:e5:9e:c6:18:f0:97:8d:39:43:40:15:
         b8:3f:de:65:bc:fd:be:91:07:3e:3b:e2:c4:d5:04:3d:32:f2:
         20:f6:fc:25:e6:95:fc:e0:d0:bb:59:1b:95:e5:a1:fb:5e:20:
         a3:14:43:52:13:5a:6f:e3:f0:c4:34:64:51:b9:c6:53:87:a4:
         36:43:67:fb:17:3f:05:d9:6f:6f:7f:1b:22:31:76:c4:a5:b9:
         f1:20:c8:c5:5e:d4:07:37:93:2f:db:4b:b2:43:f1:02:c0:1c:
         e7:76:d9:38:4e:8d:09:3d:8c:71:ff:be:04:35:d5:b8:ac:a0:
         ab:f1:2a:df:7a:ec:f7:66:63:db:f7:58:63:fb:05:b6:8d:c0:
         1f:1e:7c:98:4a:ed:7f:d8:5d:6f:6a:90:1b:4a:61:ee:83:ac:
         f8:47:88:cf:89:2e:21:8b:15:07:b6:1a:4c:69:aa:07:e6:cf:
         78:d8:f5:3e:c3:f9:1a:7b:29:87:f8:0c:00:53:25:a5:11:a5:
         ac:38:e2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:52:16 2024 by rpki-client on console-ams.rpki-client.org