Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/70093d6f-fe19-3453-a2b9-fbcbbf78192e.roa
File:                     70093d6f-fe19-3453-a2b9-fbcbbf78192e.roa (raw, json)
Hash identifier:          uNnGoXE3nqu9CiYzzgKmXOo6m4KxUOeXPzUaWaFkUB8=
Subject key identifier:   5B:FE:04:76:00:16:B2:57:73:50:EC:19:E4:14:32:B0:E7:04:FA:24
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845BEAE159CD2134E6818B4C780
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/70093d6f-fe19-3453-a2b9-fbcbbf78192e.roa
Signing time:             Fri 03 May 2024 01:00:24 +0000
ROA not before:           Fri 03 May 2024 01:00:24 +0000
ROA not after:            Thu 01 Aug 2024 01:00:24 +0000
asID:                     16904
IP address blocks:        209.237.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ae:15:9c:d2:13:4e:68:18:b4:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May  3 01:00:24 2024 GMT
            Not After : Aug  1 01:00:24 2024 GMT
        Subject: CN=e7757fa0-9ddb-4635-b413-dcdab8987a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:3c:47:5b:b0:d4:9a:6a:18:39:7c:78:5a:
                    fd:85:b3:f9:52:7b:34:7c:c1:87:2c:62:25:da:74:
                    52:be:2c:e2:cd:c1:f1:5d:f8:62:73:aa:43:02:05:
                    5b:95:d1:16:29:4a:c0:66:11:19:5f:5a:44:ad:a3:
                    cc:14:bb:8e:7b:9f:9e:53:ce:23:83:c3:8e:a0:54:
                    79:79:f6:2f:14:67:bc:6e:5b:6b:89:cc:b2:61:d4:
                    ee:57:db:14:ef:ca:ba:9f:5f:03:e4:2c:20:34:f6:
                    b0:b8:dc:14:99:01:98:4d:72:48:3d:cb:28:31:15:
                    8b:17:1b:69:5d:3b:5a:6e:c2:4a:0e:25:cb:a2:cf:
                    a5:c8:d9:60:d2:c2:ca:5d:1e:7e:ab:f1:fd:6c:21:
                    52:61:1a:a6:a5:fb:02:94:a5:b9:5a:a3:8b:4a:e7:
                    4c:77:ba:c9:79:f8:45:46:eb:e3:b0:b7:f9:47:88:
                    90:60:47:9d:b4:b8:8c:a1:8f:60:e5:c5:2d:ed:5a:
                    73:1f:33:2b:4f:6d:0d:1f:bc:c2:5e:4c:4d:c4:45:
                    d1:d7:2c:3d:0b:c9:fc:95:fa:7b:bc:87:31:24:61:
                    bd:9e:ba:9a:3b:5f:1b:3b:c9:26:93:7a:94:03:58:
                    ad:a2:fb:0c:99:7c:6a:1e:f6:70:db:06:81:35:f3:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FE:04:76:00:16:B2:57:73:50:EC:19:E4:14:32:B0:E7:04:FA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/70093d6f-fe19-3453-a2b9-fbcbbf78192e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:66:5b:80:7a:a9:3c:bb:0f:4a:29:32:03:1c:1b:46:94:
         0a:43:37:f0:29:1c:6b:06:8e:f6:57:42:0f:10:92:55:0b:c9:
         d6:a6:3a:07:19:0f:8f:cf:87:35:e1:c4:ea:3f:7d:39:ed:1a:
         e2:cd:3c:28:07:30:cc:a7:02:b8:e7:e1:44:00:c8:db:30:19:
         f2:09:61:a1:5e:e9:70:01:f1:90:b5:77:67:b8:bd:bb:c4:db:
         03:62:23:21:34:9f:d6:b6:df:0e:a1:09:97:4a:4c:3d:35:c5:
         9c:0c:3f:ac:27:67:25:f4:a1:1e:75:61:94:a6:96:b7:13:e9:
         03:e9:72:82:1f:42:76:70:d8:9c:05:85:39:a7:e6:ce:fe:f3:
         ab:5d:d5:fa:d8:8d:c6:ce:28:d1:2b:e0:80:93:59:51:7c:4e:
         c0:98:6e:51:01:07:1c:69:5a:35:18:b5:f3:dd:02:fc:31:0e:
         e2:77:6b:74:0d:70:6c:ac:95:cc:8d:c7:3c:aa:e8:ce:55:b5:
         9c:54:72:f3:5e:8f:ac:f2:0a:79:16:22:6b:57:f3:87:c6:b1:
         5a:b6:11:57:c5:f8:ff:48:7e:aa:46:5f:92:33:b9:ea:80:27:
         6e:2a:d6:61:a9:15:e1:20:52:e1:12:f9:10:b0:be:78:1e:07:
         0e:fe:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org