Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa
File:                     e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa (raw, json)
Hash identifier:          4IfVESOdxwF0f3QsSmvianG8CglKULDupwrI5GgvZso=
Subject key identifier:   1E:09:A3:21:BD:00:83:8E:FD:70:70:4C:06:B7:BC:62:73:A5:CA:3A
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F43285845E193CACE68570C16BB62B900
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     398143
IP address blocks:        72.46.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:ca:ce:68:57:0c:16:bb:62:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=7a852f0d-504c-4ec0-bee6-2aa5745c14b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:f8:27:f0:84:fe:84:7c:f9:27:38:ff:e9:
                    65:2f:91:24:d5:8b:b3:3f:4d:41:f3:c4:67:a8:62:
                    98:35:fb:ae:89:82:44:47:b5:bb:58:1e:f6:ad:8a:
                    1a:0b:3f:d4:a6:c6:80:48:94:78:da:91:ad:fa:bd:
                    26:ce:e5:bf:08:ec:65:a1:b7:9c:e4:09:fb:af:f2:
                    9c:f3:53:65:eb:fc:80:78:0a:90:cf:b3:06:6a:d5:
                    69:eb:19:46:bb:f3:7a:80:d7:f1:86:da:f7:2a:9a:
                    07:05:3f:24:a7:a7:c2:e7:05:14:0c:f7:3e:f4:bc:
                    c3:b0:4f:e6:86:42:55:01:a8:0e:bc:4f:0c:24:ee:
                    11:a6:0e:70:20:ff:24:a0:d0:ff:83:33:8a:81:5f:
                    e3:b3:ce:f6:94:c6:75:03:03:58:20:8a:3e:73:a8:
                    06:05:30:38:c2:b7:e5:b5:b2:1a:5c:52:b2:6f:d0:
                    94:f5:9a:56:df:22:3d:4a:70:da:32:e8:70:57:ad:
                    2e:a0:8a:47:f1:15:27:fe:35:ae:74:7d:d1:58:7b:
                    e5:8f:ba:2f:7d:f6:ee:23:f8:00:48:ae:e4:14:c8:
                    5f:99:2a:fd:28:bd:b3:36:fa:7f:73:17:c6:ac:2f:
                    35:d6:4a:70:65:9e:7f:98:89:e3:31:93:9c:01:e1:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:A3:21:BD:00:83:8E:FD:70:70:4C:06:B7:BC:62:73:A5:CA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:e8:a6:a1:8f:cb:eb:ea:81:b5:31:5f:79:a2:dc:cc:0f:
         30:e0:23:7d:6a:8e:1c:5b:0a:85:3c:21:13:71:41:e1:39:3b:
         37:55:b5:bf:72:80:ab:8b:00:51:3b:10:b2:da:11:d6:ee:ff:
         ca:ab:13:cb:8c:36:0d:ec:bf:a4:f1:3f:18:2a:ee:79:f8:77:
         e3:79:fd:ef:82:a2:1f:46:a1:14:38:43:29:c4:b7:f7:1d:bb:
         20:59:7b:41:c2:2f:f5:71:45:05:7f:61:29:82:a5:58:73:85:
         41:a0:41:de:40:92:18:f9:15:89:87:ff:6d:e6:fc:66:da:e6:
         3c:b6:3b:38:c9:1f:89:73:f7:c3:7b:e5:dd:fe:c3:7f:c9:6e:
         72:15:f8:f2:d8:8c:cd:4f:b6:02:e6:e8:ff:32:29:8a:1c:cd:
         66:8d:14:24:bf:72:af:79:ae:9c:cf:1f:3d:51:1a:0a:80:35:
         c2:91:41:ad:cc:eb:c9:0b:56:78:9b:f2:b4:8c:88:e4:ee:0a:
         07:5d:04:30:bc:7f:ed:16:52:d9:fb:42:23:9e:c9:fa:b0:6d:
         92:77:6b:6a:2d:db:e0:6c:07:e4:5a:0c:5d:24:5a:11:87:49:
         9c:b3:82:7f:01:6f:50:2e:45:6b:22:13:3d:20:d2:e0:29:ca:
         66:2d:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:58:16 2024 by rpki-client on console-fra.rpki-client.org