Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
File:                     87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa (raw, json)
Hash identifier:          NWjF/Z5bdZDxZ7m7Z+V7e/RToM1PYynow64I1A6ME4Y=
Subject key identifier:   11:28:98:BA:60:94:46:2E:23:84:3B:E8:38:F9:C3:82:5C:74:2B:A4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584535E297CBB5FC7C38323F1F40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        207.219.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:97:cb:b5:fc:7c:38:32:3f:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=2d1f0b88-f221-461c-850c-103c2d0b3317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:14:93:4a:c2:3a:75:39:1b:10:d9:41:2b:
                    09:82:4d:10:74:9c:17:19:52:03:35:18:1e:65:0a:
                    7e:f2:be:a8:83:d4:61:e2:c1:14:6b:b5:d6:93:e2:
                    82:18:23:43:5b:42:5f:27:dd:72:09:0a:ea:d5:09:
                    3a:84:87:d0:f3:4b:6d:ca:20:39:ad:97:18:4b:2e:
                    96:de:a6:b0:d0:55:98:cb:76:06:0c:ec:54:b1:ef:
                    51:13:72:f9:7b:00:eb:f5:32:33:6d:17:1a:67:a2:
                    d9:4f:dc:a0:2e:0f:1a:d5:5c:2c:67:e5:d2:c7:a5:
                    3d:c6:01:07:23:d2:a9:62:d0:f3:9f:2d:4e:dc:af:
                    c0:26:3d:b5:a4:11:7c:a2:28:46:38:e8:8f:22:51:
                    68:a2:1a:77:bd:d5:32:57:cd:42:e1:0e:0f:ff:68:
                    30:c7:13:19:d6:d8:42:5c:31:a2:cb:70:1f:51:28:
                    d6:1f:9c:9d:19:e0:c8:7c:7c:b2:2d:82:a5:db:c1:
                    59:76:b8:35:4a:b4:08:e4:f1:eb:c5:29:c8:36:83:
                    96:c6:c1:d3:89:41:54:5d:61:34:b2:9b:40:61:5b:
                    6d:6f:3c:22:70:ff:a9:df:1f:11:95:31:d9:60:04:
                    69:1c:8f:8f:d5:45:a0:02:a0:c1:a2:87:c4:2a:ab:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:28:98:BA:60:94:46:2E:23:84:3B:E8:38:F9:C3:82:5C:74:2B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:47:39:d6:0e:86:f5:0b:fd:98:d5:f7:1f:b5:36:ea:f7:b9:
         03:6f:55:5e:4f:51:59:51:29:c7:9a:61:06:9a:e7:80:79:ec:
         f4:76:3c:ee:fe:ab:fb:f6:5c:91:c9:7e:d4:6c:3e:30:33:b3:
         db:e1:69:d6:48:00:32:ff:72:de:70:0d:66:85:f9:6b:e0:da:
         1d:f8:0c:00:3a:b0:15:95:f8:5a:c3:8b:f4:ca:0b:c3:ac:d1:
         e7:aa:f1:4c:93:48:91:e6:d6:4e:12:18:38:ee:9a:59:8e:8e:
         7f:f8:9c:00:81:6b:45:8f:76:b3:ff:00:cb:ea:6a:7e:27:45:
         06:80:23:54:a2:11:29:29:be:15:89:fd:84:8c:92:2e:17:59:
         e2:0c:a4:98:38:38:60:d3:8a:d4:c1:18:69:64:11:a3:22:0b:
         24:cb:9d:b2:e2:f8:6c:31:4a:df:7c:94:48:6e:a6:01:a6:5a:
         5d:80:38:c9:e9:3c:ec:dc:4a:14:3c:05:5f:e2:64:de:8b:a7:
         a4:63:6b:0a:b1:5e:b5:39:a7:b5:95:22:42:32:79:06:17:12:
         0b:e9:50:eb:79:e6:8b:02:f2:b5:27:bf:01:44:0e:be:d9:af:
         66:0a:f0:14:c4:a5:40:15:11:65:b2:b8:09:2c:4a:97:28:35:
         db:2a:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:03 2024 by rpki-client on console-fra.rpki-client.org