Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa
File:                     72d292cf-5081-3148-8146-3ea47350a35e.roa (raw, json)
Hash identifier:          yL16kCUm06nVSCK2Wygvm0+zOHdMVWnzTCCM54lmZXE=
Subject key identifier:   A7:21:8E:BF:CD:E2:CF:6C:0E:31:C5:A5:32:6D:AB:B3:A4:0C:33:E1
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F4328584571E87123FC6B7549E5783580
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     40555
IP address blocks:        162.223.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:71:23:fc:6b:75:49:e5:78:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=f7522393-dff2-46b9-a2e0-1a0dd21ee4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:3b:56:51:c9:f2:67:c1:c8:d3:75:d8:ad:
                    ec:e4:98:ca:4f:02:f1:2c:03:f5:5d:ec:7c:f6:66:
                    93:27:3b:94:8f:13:e2:33:7a:7b:06:f8:d2:b6:7c:
                    0b:75:be:20:bb:4e:d8:79:1d:50:78:46:9e:dc:db:
                    68:f9:a3:16:80:ae:2a:ba:3f:c0:41:46:bd:75:f0:
                    22:08:b8:d5:bd:13:27:ad:3c:f3:d6:86:80:fc:b9:
                    6e:66:5f:dc:e6:c5:03:64:3e:57:e3:f6:77:f3:a1:
                    dc:db:bd:0f:b1:79:3b:2d:2b:3a:72:d4:7f:db:fe:
                    42:80:c9:8c:8a:aa:6a:56:ac:dc:82:c6:61:85:21:
                    07:88:d9:90:ec:9a:bd:b7:1d:93:e3:07:cd:5f:b4:
                    72:18:dd:fe:ef:a4:19:bf:18:1b:0c:61:e8:35:a2:
                    cc:94:9f:36:48:dd:b2:ed:0e:6e:19:46:2b:c7:d2:
                    bd:9f:a1:7f:2c:5a:f4:cf:35:9b:b5:24:0e:bb:0c:
                    d1:63:e3:e7:a2:47:11:63:3f:34:ba:33:ce:93:13:
                    7e:85:f9:a3:b3:cb:b0:bd:9a:d5:f7:75:0c:49:81:
                    1e:4f:4e:e9:a8:0c:de:3d:3b:8b:d4:0f:02:39:bc:
                    f2:05:94:de:78:a8:8c:30:3a:07:e3:ba:57:8f:a4:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:8E:BF:CD:E2:CF:6C:0E:31:C5:A5:32:6D:AB:B3:A4:0C:33:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:17:b0:ed:df:1b:b4:df:70:34:86:17:05:68:f1:ee:45:32:
         63:39:44:c3:6f:4e:a4:76:6d:96:1b:ff:9b:9c:fc:0c:e9:52:
         90:9d:c1:1e:23:84:2e:3d:eb:48:95:92:df:1a:2b:ad:1c:31:
         42:1a:84:55:79:64:b4:30:ab:da:22:ba:50:73:c1:de:7d:69:
         0f:2d:91:09:a8:45:81:cf:99:1d:f2:b1:59:a0:ca:9a:6d:d5:
         60:b8:d4:17:da:50:44:a8:9e:d3:21:bb:0c:fb:c0:0b:94:15:
         04:98:ba:e2:0a:0b:38:a2:7d:bc:2b:ce:cc:e0:52:04:a7:a3:
         30:20:cd:96:50:72:35:a2:ac:fe:4d:ab:0c:23:10:7b:07:3b:
         87:83:ff:ab:df:6d:31:a9:75:dd:9e:aa:b0:ae:ac:71:22:33:
         39:aa:d0:81:60:69:03:d3:cd:a7:b8:56:f2:47:d2:05:c5:43:
         81:8e:86:9f:ef:85:80:78:78:4c:67:33:0f:30:e1:4c:06:e9:
         1d:3c:b0:2f:13:75:94:ba:e3:40:e1:ac:a2:0e:84:3e:19:76:
         bd:3b:13:91:0f:97:12:55:e8:79:b4:ec:0f:b4:58:ed:07:ec:
         c6:f7:3e:95:09:0b:01:6e:68:5e:d1:ae:7c:81:b1:d1:d8:8c:
         60:43:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:20 2024 by rpki-client on console-fra.rpki-client.org