Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
File:                     79d8abae-3316-3d89-a2d0-f12238f8acbe.roa (raw, json)
Hash identifier:          +Pc2uOSK/DAzkvNYdbqH8Hl3ScJRqeOer4mgYtNZuq8=
Subject key identifier:   7D:D7:6A:C8:FF:91:FE:35:8B:77:BF:1D:4A:AB:6C:7C:2C:F3:79:44
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285845CE090B5740D25FD03781C580
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     25934
IP address blocks:        207.42.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0b:57:40:d2:5f:d0:37:81:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=dfcc8834-7bb1-47b6-8d1e-611d25cf4fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:77:54:f5:fb:5b:a3:03:8c:26:68:61:a6:
                    99:dd:58:ab:fa:6c:16:05:a3:b9:d8:ae:40:f1:27:
                    38:e4:78:59:6a:67:a8:4f:b2:8b:28:f4:b5:fb:6b:
                    08:71:a9:1e:dd:1a:db:80:cb:5e:fb:1b:44:0c:de:
                    eb:b7:5c:91:25:e6:39:2f:92:dc:ad:c0:7d:b2:15:
                    ce:b6:a1:e6:c0:73:c8:fc:ef:56:f6:8e:e5:76:8a:
                    ec:d1:37:9e:07:6d:4e:87:8d:24:dd:54:f8:17:1a:
                    39:89:ee:8e:1f:3a:08:94:ec:b1:88:cf:48:fa:b1:
                    80:29:f0:60:9c:0e:45:e1:49:7b:a1:a2:66:ff:f8:
                    16:b0:44:7f:a2:b3:64:a2:36:ef:b0:4b:8e:f2:48:
                    4e:a3:ac:c5:c7:a3:3f:77:ef:c7:2f:b3:f4:0a:65:
                    07:c3:c2:ed:0d:ae:1a:72:6b:2b:de:fb:e4:a0:40:
                    1e:78:2b:1a:75:39:05:86:ea:dd:d9:60:e0:f1:eb:
                    fc:15:66:e2:48:67:32:57:55:2e:c0:af:7e:1a:56:
                    67:1e:17:ab:0b:f5:3f:1f:7f:17:04:39:44:b0:75:
                    fa:74:0c:2f:8c:4d:25:a6:05:42:99:19:9a:5e:2e:
                    c7:4c:6e:9e:23:1a:38:30:29:40:b3:d3:0e:9c:72:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:6A:C8:FF:91:FE:35:8B:77:BF:1D:4A:AB:6C:7C:2C:F3:79:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.42.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:9a:61:bd:3d:d3:ab:0f:b5:4f:74:d5:fd:8c:7a:46:b6:
         8a:c8:37:e6:3a:b3:ad:7a:15:a2:f9:39:3f:15:59:29:7a:e0:
         6c:91:ec:c1:15:25:31:4b:fe:75:d0:a4:63:f2:2c:15:ff:30:
         f3:61:19:9a:f7:26:f1:10:89:e9:1c:5f:2f:77:9f:8c:05:63:
         27:0a:11:2e:24:eb:36:ba:78:bc:71:99:4b:bf:e7:7d:a5:e1:
         b4:8a:d3:45:70:80:73:4b:59:da:77:94:0e:4a:10:4c:5b:5d:
         8a:b5:88:6e:61:11:30:41:10:f6:e4:77:ab:e9:e7:be:e0:8b:
         0a:3c:15:58:89:57:ca:34:44:df:37:25:b4:9a:a0:e6:f2:57:
         b3:b7:bf:47:9c:b2:40:16:31:16:0d:fa:2b:ac:c5:a7:e2:8d:
         9f:9c:b5:14:29:3d:af:1f:2b:04:2e:40:7a:b8:16:6c:0f:b1:
         97:5a:5a:e6:a1:80:61:05:cb:76:72:43:73:2a:f9:14:53:75:
         d0:1c:14:4d:17:f5:d8:af:17:d6:ff:7b:f1:60:16:0d:dc:af:
         3e:65:0e:79:2b:2f:0f:b5:61:3d:04:6e:84:6c:41:e4:f7:17:
         a4:15:cc:d6:e3:fc:01:01:ae:01:f0:ed:ee:05:62:a4:7b:bf:
         87:7b:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 07:27:49 2024 by rpki-client on console-fra.rpki-client.org