Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa
File:                     4a881d38-e71c-3afa-a893-e9ae385f7409.roa (raw, json)
Hash identifier:          /kNpP1xUb6dXEqHCCvHzMCmMnOgLBpZyY4t5cfKA0lo=
Subject key identifier:   17:E0:E4:5A:CC:2A:7C:C6:D2:AE:6F:7C:27:C1:18:75:5A:40:FD:4B
Certificate issuer:       /CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0
Certificate serial:       010D0C9F432858457082FE5BC99CEA3A81B75F40
Authority key identifier: 3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     53546
IP address blocks:        144.86.176.0/23 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fe:5b:c9:9c:ea:3a:81:b7:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=651c4fec-7cf8-475c-b1df-509f18f7c319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:2a:53:6d:81:54:91:0e:4a:c5:df:b5:21:
                    6b:53:b6:bb:3f:80:38:58:aa:e3:90:57:f5:5f:0e:
                    f4:bb:59:75:9c:3d:1e:9f:b1:ab:35:2d:c7:18:bb:
                    bd:77:28:a9:80:33:26:08:82:99:f9:52:37:c0:ea:
                    8e:6a:20:93:df:b3:1f:f0:c1:19:b7:09:29:3f:76:
                    a3:52:90:a1:7b:e2:43:1b:c2:2d:b5:ae:54:6e:c1:
                    c6:c6:f4:92:7d:d8:31:0b:c7:b9:54:24:53:39:e7:
                    5d:69:28:11:2c:22:11:3b:da:54:bc:cc:db:9d:09:
                    86:86:f0:8b:1b:92:df:74:41:fa:6f:9d:7a:09:5e:
                    c8:02:ae:e5:8a:8c:fc:61:9a:e9:55:6c:e8:85:a8:
                    9a:ad:1b:28:e7:0c:55:2c:7f:59:69:5b:ee:40:29:
                    9b:88:2e:95:d0:7b:01:97:4c:38:5a:42:da:48:a4:
                    4d:bd:29:b6:d9:4f:09:c2:e2:cd:5b:17:57:70:1c:
                    0c:c3:a5:96:73:44:16:b0:23:07:cc:51:2c:ca:13:
                    aa:26:23:b3:c9:23:3c:cc:42:9e:36:14:df:e7:d8:
                    4d:4f:75:78:9d:4b:4b:0d:2c:98:1a:b5:c1:42:ed:
                    9a:bb:d4:93:a8:5c:dc:35:8a:ce:a4:7f:5a:bc:0a:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E0:E4:5A:CC:2A:7C:C6:D2:AE:6F:7C:27:C1:18:75:5A:40:FD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:cb:55:2f:48:d1:68:71:a2:08:93:47:2f:60:ad:17:1e:
         7a:49:2c:fe:22:30:56:4e:18:97:e7:61:b6:41:ad:04:ba:87:
         7a:b3:37:bd:39:c4:13:b3:93:45:b9:ae:6c:73:ac:15:4a:09:
         af:b4:6c:af:74:a1:85:33:3d:a1:1b:c6:59:5a:24:41:64:6c:
         70:97:4c:75:7e:d7:bd:52:5b:3f:15:ef:74:b6:b7:53:de:4d:
         4b:45:4a:c4:ba:78:e1:9c:51:1f:cf:73:b6:50:1e:f0:58:43:
         06:75:58:1d:05:d3:43:0c:da:1b:66:19:4a:36:1a:bb:88:f3:
         49:f0:f2:cf:bc:1c:35:49:4f:83:23:03:d6:f4:b9:ad:03:6a:
         ba:fe:92:bb:c6:25:e7:74:61:d6:9f:79:a5:fe:22:f8:b0:b3:
         1f:dc:06:75:da:82:68:0a:6c:f0:2a:c7:b2:c5:14:d3:f5:be:
         8f:43:18:87:d3:d4:a0:ea:ab:1b:75:b3:a3:5b:40:4a:3f:36:
         c4:53:a7:12:1a:bd:3a:71:05:8e:4b:81:64:79:c9:28:c6:f3:
         ca:5e:43:26:7e:ae:4e:6b:7f:b0:00:fa:4d:61:14:6b:bd:b1:
         c1:00:d9:24:9b:a8:ef:dd:c7:d1:05:27:49:c3:6c:80:34:75:
         16:b1:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:01 2024 by rpki-client on console-fra.rpki-client.org