Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File:                     542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier:          5D1MjIdNm39CRzDm+BqsuQg1X4JyQoTOoYvNYsyCXfU=
Subject key identifier:   9D:64:E2:B2:72:EB:FB:60:C8:B0:57:DB:57:8F:AA:7D:54:8D:CB:3C
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285845EE23BD06153CD666355DDDC0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time:             Mon 20 May 2024 01:00:26 +0000
ROA not before:           Mon 20 May 2024 01:00:26 +0000
ROA not after:            Sun 18 Aug 2024 01:00:26 +0000
asID:                     21530
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ee:23:bd:06:15:3c:d6:66:35:5d:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 20 01:00:26 2024 GMT
            Not After : Aug 18 01:00:26 2024 GMT
        Subject: CN=2fdef667-721f-4e45-8416-49cb596dff82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:f7:62:0a:0e:9a:42:24:b4:62:df:cc:b0:
                    20:3c:c9:aa:21:51:cb:aa:3b:24:1c:53:9a:2b:e2:
                    e3:ba:97:ed:85:41:0b:4f:3f:c3:b9:4a:2d:9a:b1:
                    f2:e8:b6:97:a2:b5:2e:37:02:9f:27:ce:c2:aa:c3:
                    c0:6b:00:fd:a5:63:c0:7a:c7:99:42:fa:7e:03:4a:
                    6d:8d:5c:5e:32:18:54:fe:69:b4:55:01:84:8c:23:
                    61:b4:a0:ae:bf:41:6c:49:23:7e:f2:d7:ef:fc:76:
                    be:6f:f2:70:e8:d7:49:46:8a:6c:45:ab:ae:88:08:
                    95:86:d3:03:0a:b2:65:32:98:29:fa:5d:a4:04:37:
                    1e:e5:cf:fb:d3:fb:db:4a:e8:03:c8:1f:a8:e6:88:
                    f9:af:6d:e5:4d:0a:e8:0e:23:5c:ae:66:aa:a5:c5:
                    78:5b:3e:64:b3:f3:46:9b:6c:d5:fe:f4:13:37:f7:
                    2f:7f:95:ee:5e:91:bf:01:30:67:70:c0:80:66:67:
                    5c:3c:2d:f2:d5:28:ec:ac:cf:fd:60:86:0f:e0:03:
                    9b:4d:a0:97:df:55:20:8f:21:52:66:d0:17:c4:78:
                    ce:f4:fc:65:6b:f2:02:bd:03:50:5c:e1:f0:e2:fc:
                    60:73:25:e2:60:12:74:5f:5d:af:fb:d7:6b:36:61:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:64:E2:B2:72:EB:FB:60:C8:B0:57:DB:57:8F:AA:7D:54:8D:CB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:95:58:05:3f:ce:8e:ae:ce:8e:42:ef:97:e9:24:12:c1:
         ff:23:72:bf:90:eb:46:7a:ed:9a:7e:a7:c2:d2:a5:95:08:86:
         ea:18:31:58:c9:51:6f:85:36:01:65:e9:d9:bc:97:e8:b9:c5:
         aa:e6:ac:ef:ff:e7:bc:d8:04:76:4d:6d:f5:dd:65:95:4e:30:
         94:ab:1c:9a:48:2b:bb:87:b2:93:55:0b:a9:d3:c0:15:fa:c7:
         7f:c1:22:ff:45:b9:88:5a:b5:86:26:53:b4:0f:0a:fb:ff:3a:
         7c:25:b3:93:e8:78:e1:6c:4e:a9:2c:35:ea:b7:90:18:68:75:
         1e:89:7a:8c:19:19:d9:8f:61:46:4c:28:2c:32:64:72:af:de:
         ee:6f:5d:3d:c8:41:d8:48:73:57:ec:a8:5e:0e:5e:b9:2b:5b:
         2a:6f:ce:5e:59:ef:06:03:6b:8d:9b:cf:8c:c9:bd:ae:7e:57:
         f9:50:8c:6a:e7:82:39:d9:db:2c:0d:d6:c9:c9:d4:bd:19:d4:
         c0:d6:57:1d:56:46:2c:28:dd:ae:cb:8f:f4:c5:81:68:94:7b:
         5c:af:16:f3:be:64:81:ae:37:57:17:26:4c:b8:59:01:74:eb:
         02:2a:29:50:90:2a:55:c2:47:d7:2c:5d:19:2c:b0:45:4f:3d:
         bc:5c:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 06:56:38 2024 by rpki-client on console-fra.rpki-client.org