Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa
File:                     a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa (raw, json)
Hash identifier:          slidqXmgp3Bq1hnBLmNQepwI8ufOcEpl7ys7O3y/pNM=
Subject key identifier:   B2:A5:F2:39:A1:EC:F1:70:0C:01:83:F7:64:3E:D5:98:DE:CA:8C:90
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845F7E93E5AAE605CCC35D34B80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     212384
IP address blocks:        209.145.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:3e:5a:ae:60:5c:cc:35:d3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=f4104d74-f65b-486e-862d-aac93c3919ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:01:35:f0:7c:28:0b:8a:14:e1:4e:44:1f:a7:
                    6a:4e:af:ca:6c:42:51:6c:14:d9:38:b7:c6:0d:c2:
                    98:22:92:fa:a6:df:74:1d:0f:27:e2:0f:84:a9:39:
                    83:b7:83:5e:66:1b:a2:ff:dc:cb:90:bd:ea:7c:d6:
                    46:bd:9e:8e:01:7f:61:9a:85:6e:40:21:20:88:55:
                    85:f1:ac:45:1c:1d:94:11:3a:96:80:db:dc:b3:14:
                    0e:31:3f:8f:af:37:de:a9:5c:9b:93:8f:82:11:ae:
                    e1:6a:76:bb:46:21:cc:c9:14:36:ac:2c:ee:32:4b:
                    53:43:23:bd:03:f4:16:d3:7d:ea:58:68:43:bf:60:
                    34:bf:b5:f5:b9:19:f1:65:93:9e:43:b7:83:c7:96:
                    37:11:70:46:91:26:04:e7:6c:96:fe:8f:83:3b:a6:
                    3b:a3:b0:ab:1d:55:1d:e1:6b:0c:62:35:12:60:40:
                    59:ae:c2:93:d0:dc:03:38:e8:0e:e0:db:28:80:f9:
                    4b:46:fa:62:97:de:9c:d3:e4:7d:0d:31:3d:2b:6c:
                    9c:4a:3a:dc:18:f0:08:3b:e9:e6:42:4c:4d:b9:ed:
                    2f:f0:fa:3c:65:26:11:34:70:5b:2d:ec:08:55:1a:
                    3b:40:c6:20:57:a9:c7:eb:33:89:84:7a:a3:5f:5a:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A5:F2:39:A1:EC:F1:70:0C:01:83:F7:64:3E:D5:98:DE:CA:8C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a4b273c7-3b21-3d49-b100-53a1e74f3efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:f7:f6:b9:95:80:f7:5d:2d:02:e6:15:c8:cf:00:d9:d7:
         75:e6:cb:d6:d7:a1:74:00:2a:2c:03:11:a0:0c:4a:e9:b7:65:
         86:ef:ac:58:e1:48:b3:0f:2a:7a:03:0c:61:ce:81:de:c9:6f:
         6e:a8:fb:c6:91:fb:3e:e8:ba:0d:6a:ec:71:8f:04:00:8e:9c:
         7b:08:df:1a:8e:f6:34:ea:34:46:41:83:76:42:c9:6d:25:ec:
         c9:65:83:a2:36:7f:5a:61:f4:fa:0c:b6:4e:97:86:eb:50:34:
         14:95:33:90:6c:b7:36:54:9c:8f:53:ab:8b:85:12:bc:6d:31:
         d2:4e:0c:7a:76:97:6c:70:80:9a:1e:ef:3e:56:12:dc:09:f1:
         5e:45:e0:fb:71:01:52:b2:fd:d8:c0:ee:b3:00:66:b3:4c:77:
         7d:7e:d2:61:d0:b6:19:a5:74:41:50:f7:2d:52:f6:07:ba:b8:
         fa:67:c8:11:1d:83:5b:f8:ba:74:f2:a4:05:3f:3b:4f:84:5f:
         f8:da:c4:8e:8b:c3:fa:85:a6:17:6b:c3:75:e2:ac:c2:14:b7:
         89:3e:3b:ab:18:74:3d:c2:87:cd:75:55:14:1c:87:ed:3c:38:
         fc:48:43:df:69:d1:1c:68:95:e5:4d:58:5f:d9:74:77:33:cc:
         ea:a2:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:53:36 2024 by rpki-client on console-ams.rpki-client.org