Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa
File:                     ecf35372-9221-37b1-818f-bf66b0bb748d.roa (raw, json)
Hash identifier:          Km0ETBldgHhuSs64ZU5jUm0JsOorexBOdmWIh0klc54=
Subject key identifier:   45:1B:66:94:D9:8E:99:5B:05:AF:F5:AC:C5:14:51:4C:62:D8:DE:DC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462D39875B99959C1A1B9580
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa
Signing time:             Wed 20 Mar 2024 21:03:47 +0000
ROA not before:           Wed 20 Mar 2024 21:03:47 +0000
ROA not after:            Tue 18 Jun 2024 21:03:47 +0000
asID:                     36040
IP address blocks:        208.117.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:39:87:5b:99:95:9c:1a:1b:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 21:03:47 2024 GMT
            Not After : Jun 18 21:03:47 2024 GMT
        Subject: CN=57577b3b-9d82-4d9f-a074-8cc53113ec7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:ce:2e:2f:35:51:2e:48:7b:0f:49:2d:c8:
                    2f:10:c5:6e:04:f6:9a:d6:ac:da:9c:8a:78:5b:e4:
                    09:53:2b:4e:f9:98:d0:c3:9d:39:5f:2b:2a:fb:4d:
                    cd:23:a3:d7:c6:d5:f7:78:68:9c:74:57:d9:71:fa:
                    5a:ed:19:d2:23:27:2e:e6:a3:af:ba:19:0f:9a:c2:
                    d8:31:33:f8:a4:30:e3:ab:ec:7f:67:fe:c1:9e:a0:
                    6c:53:bf:42:96:39:57:1c:0e:f5:7e:70:a0:32:0c:
                    49:b2:03:c7:bd:a8:3b:d3:ec:b7:78:b9:d8:59:13:
                    e1:0b:92:14:4e:54:9a:45:31:0b:42:0b:f2:6b:b1:
                    50:b6:0a:94:d4:ba:86:82:e3:30:10:f8:1b:08:b3:
                    b6:de:85:6f:e8:49:cf:5e:f7:c0:40:5c:6d:8e:93:
                    57:cd:b4:ce:73:5e:a6:6e:df:e9:6b:12:95:26:fe:
                    b1:06:bf:ef:4e:31:80:4a:1c:9d:d3:23:77:8f:b7:
                    60:89:11:62:dc:65:f8:78:7c:7c:45:57:71:5d:a6:
                    d9:73:72:87:91:a4:ea:22:8f:c3:b9:42:d0:e1:d0:
                    c0:d5:20:2c:5d:ce:10:16:52:66:06:c6:20:45:d9:
                    6b:3b:14:1f:31:6b:a4:c7:3f:94:a6:01:fb:ac:49:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:66:94:D9:8E:99:5B:05:AF:F5:AC:C5:14:51:4C:62:D8:DE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:c5:11:12:ba:7b:37:4d:f6:3f:65:a7:8c:a1:e2:26:4e:
         ce:3e:ab:93:2f:d5:2e:1b:5f:73:d2:b2:4b:2f:40:e2:46:80:
         7d:9b:90:d0:d5:bc:6a:61:2d:ce:13:87:d7:2e:4b:36:4a:3c:
         36:4d:b6:6c:d8:3c:ba:25:14:96:95:91:a2:87:35:64:50:4f:
         e6:27:4a:ad:84:c3:f1:cf:2a:a7:91:c9:0c:a2:37:c6:ef:99:
         f1:45:f7:f5:42:80:2b:64:bc:22:7f:e7:4e:0c:e4:6f:39:00:
         6e:c1:7c:c0:c0:ff:e4:02:2a:35:da:b9:15:81:b0:42:d1:cd:
         cf:df:13:65:fc:2e:01:fb:6e:32:49:be:63:68:6a:c1:14:54:
         57:02:73:29:7a:06:f3:e3:32:c5:ae:3c:a2:be:75:79:44:85:
         67:f9:fe:08:85:72:2a:9c:8a:d3:61:0a:b2:47:4d:e3:a5:3b:
         6a:f2:dd:82:3f:61:a9:b8:96:47:be:24:cd:f7:55:35:b3:2d:
         ae:82:f4:04:7e:50:fc:6f:59:8a:b1:f8:e1:7c:35:d1:a7:d5:
         9a:7c:3e:2e:77:8a:c5:56:80:e9:02:72:d6:68:f2:7c:be:c7:
         2e:ad:bb:3d:7e:12:1c:43:b0:ac:f5:c4:2d:f9:16:ff:d6:97:
         e0:1f:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org