Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa
File:                     ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa (raw, json)
Hash identifier:          AAk3mNibnY8HXCWBrHP01krOAfq/VYqvqsAi+SmiqTk=
Subject key identifier:   1F:80:10:27:54:A2:06:D0:C1:72:74:E6:E0:25:8D:3A:20:F6:28:D0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462505638F3D489DDBD53B80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa
Signing time:             Wed 20 Mar 2024 20:47:15 +0000
ROA not before:           Wed 20 Mar 2024 20:47:15 +0000
ROA not after:            Tue 18 Jun 2024 20:47:15 +0000
asID:                     36040
IP address blocks:        208.117.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:05:63:8f:3d:48:9d:db:d5:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:47:15 2024 GMT
            Not After : Jun 18 20:47:15 2024 GMT
        Subject: CN=72c435d9-23b1-4158-9fa1-52b06dc11adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3e:1f:e3:19:98:3b:ed:29:e8:3b:4f:7f:e2:
                    f3:e9:38:ed:1d:94:0f:6f:a7:7d:af:5b:fb:6b:ca:
                    bc:e3:a2:61:21:2d:cd:c5:ca:11:fc:ea:83:f5:7f:
                    75:ab:0c:06:76:57:d8:d9:1e:90:4d:82:bc:5d:4c:
                    7e:7e:03:b1:3f:51:72:4b:7c:cd:64:e1:9f:d6:8b:
                    a7:9c:8d:00:9f:11:55:b7:ab:55:63:7c:bd:63:ef:
                    70:e9:8e:bc:25:83:90:df:63:4e:93:ec:07:f9:7c:
                    7a:94:a2:cd:ea:14:81:8a:e9:ae:77:7a:6c:d4:fa:
                    45:72:05:50:2c:47:b7:67:a1:a4:a8:f7:c6:a5:25:
                    56:ee:42:07:20:9b:f3:64:8c:f5:e4:db:80:b0:3d:
                    c5:a9:d3:6f:aa:4f:82:ed:7f:c4:4c:fb:9b:df:13:
                    5d:e2:53:a6:85:3e:79:c5:08:2c:9d:f1:ad:3a:e0:
                    be:69:5a:d5:37:31:64:20:52:68:41:2d:5f:0f:b0:
                    ab:bf:bf:c2:5a:9e:2d:e4:6e:d7:dd:97:19:85:9e:
                    0e:cf:d7:bb:c0:fa:e9:5c:ef:b6:0e:5f:5e:fa:4b:
                    a3:ec:b5:5a:34:9b:73:7f:41:05:d0:9b:d5:a2:77:
                    b8:70:53:33:20:45:ee:32:f0:df:a4:3f:e1:a4:a1:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:80:10:27:54:A2:06:D0:C1:72:74:E6:E0:25:8D:3A:20:F6:28:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:aa:f4:dd:de:7c:50:dc:8e:bf:89:f0:79:df:d8:00:38:ee:
         05:74:bc:2e:80:bd:d4:05:4b:22:8e:30:4a:28:4e:60:cb:6a:
         21:bb:f7:26:e7:2a:8e:2f:49:37:ce:9a:d5:2a:0c:16:fe:54:
         6b:f6:85:e9:04:20:0e:90:9c:96:d7:4d:5b:64:b1:97:4a:25:
         73:d7:8c:ed:3e:09:d7:89:55:cc:27:2c:91:14:42:22:b0:33:
         8d:30:8b:13:74:64:2a:e1:e7:79:77:6e:a4:76:b6:49:62:3a:
         2d:ee:86:0f:b1:9b:d5:70:7f:0b:d3:5f:00:2b:82:90:64:53:
         35:8a:59:b2:6f:6e:45:5f:24:90:60:f8:f9:2d:ed:6a:d8:b4:
         fe:72:a0:80:84:fa:bd:41:cd:29:e7:9f:46:a1:4f:c1:0f:17:
         18:fa:33:ac:04:96:71:78:a8:e8:2a:d1:7e:18:b1:d2:c8:4a:
         2c:f0:59:79:8c:b5:b3:22:c7:82:a9:20:cb:2f:5b:4c:e1:1a:
         68:01:e2:81:68:6a:66:c8:80:67:f9:ec:36:7e:72:4e:d0:4c:
         57:03:1d:3e:2b:d2:6c:49:54:fa:80:2d:a4:74:c9:28:3d:d0:
         f1:04:2d:df:bb:0a:e7:0d:9a:af:66:16:89:e3:a5:2a:0a:b1:
         6c:fb:b0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org