Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa
File:                     db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa (raw, json)
Hash identifier:          25XKCN6Nq1Um5x2B7TSmSzqUFHZO11T51Oer5LDMRfY=
Subject key identifier:   BD:AD:A5:24:81:43:01:94:0D:94:61:49:77:FF:6F:AB:DD:DA:CF:F2
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F43285845E193CD2EA8191E65A3D94C00
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     398427
IP address blocks:        185.165.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:2e:a8:19:1e:65:a3:d9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=1be020d6-d8e6-4d8d-a86d-5cb04f35eb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:b6:1d:4c:89:ac:9c:5c:39:44:74:87:f1:
                    21:e1:cc:aa:ee:f4:bb:6c:7c:5a:30:cd:b5:6d:ce:
                    41:78:9d:69:23:fe:e2:46:3c:4f:01:99:98:e9:af:
                    cc:73:16:e5:9c:de:14:4e:ac:af:ec:61:ba:c6:ee:
                    1e:06:a5:53:d3:87:29:07:39:1b:26:df:71:9e:e1:
                    3b:6f:a1:f2:ad:ce:dc:48:75:9a:d8:2e:17:e2:d2:
                    81:92:d4:f1:d1:72:9b:14:68:b9:d8:27:18:b7:ac:
                    92:df:42:d4:c7:e8:32:b5:0d:05:48:e3:07:72:55:
                    1b:c0:34:22:03:ff:5c:3b:00:95:ec:96:73:ed:0a:
                    52:41:1d:05:1f:97:31:77:88:b1:90:76:7e:51:20:
                    74:87:bc:09:31:f8:df:9e:1b:1a:67:9a:b5:ed:f0:
                    66:6f:ef:93:e0:7b:7c:c7:4b:5f:1a:99:63:70:fd:
                    ef:fd:e5:36:d2:6b:86:37:f2:8f:ee:4b:de:36:24:
                    6d:e5:4f:94:6c:a9:a8:e3:e0:b7:97:1b:d3:19:5d:
                    01:d0:ba:03:60:82:40:de:99:d6:fb:31:6c:db:93:
                    d8:8e:f3:be:89:d0:c3:b0:a8:6b:75:05:fc:47:46:
                    b7:bd:81:84:f7:78:5a:65:cf:70:dc:6a:77:ac:64:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:A5:24:81:43:01:94:0D:94:61:49:77:FF:6F:AB:DD:DA:CF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:26:9a:0e:a1:4b:5a:e9:cf:cb:e4:4c:62:01:b7:94:6e:
         85:d3:3c:73:0d:2f:c8:7f:84:b0:f7:6c:4d:f4:8d:c2:fb:ad:
         08:d1:74:37:95:9f:e6:53:c0:95:9d:75:a6:57:45:c5:ff:ce:
         4d:8c:05:fb:13:43:6e:3c:0c:5c:9a:18:6e:e8:85:ad:fc:3a:
         4c:5f:34:89:ae:11:61:67:32:60:2b:4a:8f:c4:6c:5b:2d:82:
         f3:57:83:a6:5d:90:fd:0f:4f:64:17:f4:fe:9e:1b:2c:4a:09:
         bf:6a:22:fb:c8:05:9f:fe:c0:f0:a0:64:c0:8c:68:dd:ca:2e:
         1f:3e:4f:17:45:12:b0:9f:2b:e5:18:4a:05:87:24:3e:c0:d3:
         36:36:7b:1c:df:a4:66:80:06:b6:00:6a:3b:56:67:5b:42:32:
         ba:1f:77:71:c6:71:0b:fc:52:2e:bd:0b:c9:9f:63:22:79:50:
         dd:83:ec:18:c7:b5:dc:e8:26:f6:da:a2:7b:77:d6:86:50:b0:
         bc:7d:f5:a9:37:33:18:67:76:f0:78:f1:6b:35:05:95:c4:d6:
         65:6a:5f:63:9b:59:6a:82:08:69:72:dd:96:ed:44:25:50:43:
         46:f6:bd:80:40:88:08:23:a7:33:8e:aa:15:e1:9e:0b:a2:85:
         3d:51:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:28 2024 by rpki-client on console-fra.rpki-client.org