Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
File:                     c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa (raw, json)
Hash identifier:          L+MI0KU/FpD4M1UNy/WUZjH7wg1QhHIBLAKQHR+amZ8=
Subject key identifier:   83:5A:A5:A0:9A:58:D7:A5:42:A7:E0:08:AA:2B:71:A5:1D:5C:4A:4A
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845ECBE7E85D66061C412D91920
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     25697
IP address blocks:        152.44.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:7e:85:d6:60:61:c4:12:d9:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=e3f12263-c529-4df9-b6ab-d978224c9958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:36:cb:0a:81:cc:18:22:62:0a:42:18:48:
                    19:a4:fc:07:ec:78:b8:00:67:32:e0:11:cd:25:fd:
                    ac:7f:3f:59:22:ce:28:26:96:f9:97:a1:4a:78:69:
                    d8:ca:2b:a8:7c:73:03:9c:c9:e1:a6:45:fd:79:a1:
                    7d:32:7e:ab:ca:84:23:eb:5b:19:86:fc:7e:fc:57:
                    32:27:da:6d:f5:de:5e:ab:00:b8:2e:78:37:0d:83:
                    94:e0:5a:06:81:d0:6e:5c:82:ad:f8:14:55:58:7e:
                    e7:e7:62:06:28:47:36:e6:85:25:f9:05:83:84:a8:
                    cd:01:4e:a0:ec:b8:cd:3f:35:3f:16:58:fd:fd:e4:
                    83:43:ec:81:ed:76:0a:44:06:aa:4d:49:45:be:f7:
                    9b:08:25:15:e1:bf:60:2e:39:24:93:59:c2:76:d6:
                    e2:b8:a1:44:bb:7b:ae:e6:a3:d7:c4:a4:92:39:c3:
                    53:4a:1d:79:ed:66:af:5c:36:24:17:77:8b:e6:f2:
                    37:55:e2:74:c1:21:53:b1:54:e2:e8:43:76:cb:2b:
                    d9:12:e1:e1:21:fe:23:65:de:09:58:f6:40:de:9f:
                    a9:0a:a2:37:26:dc:95:83:02:3b:3f:7c:02:e9:08:
                    b5:6b:71:12:23:23:a3:69:8e:aa:55:7a:22:4c:8d:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:A5:A0:9A:58:D7:A5:42:A7:E0:08:AA:2B:71:A5:1D:5C:4A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:f2:61:4f:f9:2f:04:f8:6e:27:b5:9c:8d:3d:9f:3e:ed:
         cc:1f:03:5f:f7:9b:4d:0f:59:d9:ab:14:8c:be:11:87:24:77:
         31:5c:b8:be:4b:c9:8f:1e:7d:c6:dc:66:fb:23:34:8e:de:4e:
         f6:57:6c:cb:4a:cc:36:aa:1a:c5:b7:b2:47:cd:48:cc:a0:de:
         b2:ff:17:9a:97:08:1b:66:48:c9:5b:9f:58:09:d4:f1:35:67:
         19:16:91:dc:4a:9d:39:a7:e0:49:1a:e4:8e:6f:df:7f:41:b3:
         f3:b5:1e:1e:48:22:98:76:c7:b2:f0:c0:25:ae:2b:32:92:24:
         28:04:d8:4e:88:2c:7a:53:20:d1:2a:5b:ff:e5:b4:e7:43:96:
         13:a0:dc:3e:3f:a7:88:c9:69:3e:d1:c9:7b:89:3e:be:29:52:
         c2:48:c3:51:f9:e4:80:e9:27:9d:11:b8:3f:e1:b7:10:46:d0:
         ae:11:e2:1e:42:06:0b:75:1d:f4:ed:bb:1b:fd:3c:2a:76:b3:
         7a:b8:02:95:59:03:18:76:89:0d:35:33:f0:59:f1:d5:cd:80:
         84:6b:38:1a:7d:2d:a8:90:63:5a:c5:e0:eb:09:ab:4f:af:78:
         a5:4b:e5:34:3b:f4:b4:56:36:93:21:ca:74:87:ae:3a:88:2e:
         1a:cb:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org