Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa
File:                     54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa (raw, json)
Hash identifier:          IwBWZIn9SZnSS3fwWSaX6SmB43W6D01YGRMzpPk9U0c=
Subject key identifier:   BA:D1:2C:E7:BD:D8:5B:23:B1:88:CF:13:D1:0F:4A:33:3C:5F:DD:E7
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584500F563F2591BA02D3921A720
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        198.145.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:63:f2:59:1b:a0:2d:39:21:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=84600e48-3a00-43d2-9844-29b02ccdd153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:63:cf:0d:2e:15:b4:50:f8:2f:dc:65:70:
                    03:90:ca:72:f7:e4:99:f4:1d:da:7d:59:29:0d:16:
                    66:f7:fe:07:5b:8d:75:54:71:1d:dc:95:69:ae:ed:
                    ac:6d:ed:64:a6:02:3b:b1:5d:a4:67:0b:1f:1b:74:
                    67:c6:cc:be:1c:f3:e1:ab:d0:af:48:36:7d:98:32:
                    d8:22:40:26:1a:13:87:39:df:3b:4b:f3:26:86:2a:
                    13:73:97:5f:88:e6:29:93:83:b1:02:39:9d:8e:34:
                    99:bd:df:7f:f7:64:89:e7:8c:fa:56:57:ca:63:0d:
                    80:5f:ac:0e:0f:df:9b:49:12:67:75:8f:ba:79:78:
                    e8:ba:46:d8:23:71:1b:e8:37:1a:58:73:b1:3d:0a:
                    d7:d5:8d:12:f8:4a:4c:a2:31:fa:fc:d0:6f:fc:c7:
                    26:54:b1:f3:b3:22:36:55:f1:30:6a:c7:7d:54:95:
                    73:71:fc:e5:b1:cf:05:a9:69:e5:19:29:69:d7:5f:
                    ba:f2:ab:9f:a2:78:86:8f:cc:f4:d5:fd:6b:38:2e:
                    a8:c0:1e:0c:77:61:25:63:87:65:78:2d:60:ec:52:
                    df:74:ce:67:18:3b:21:b5:d0:59:18:ae:a4:8f:11:
                    ce:27:f9:40:78:3c:3e:43:16:39:af:ae:e7:4d:9d:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:2C:E7:BD:D8:5B:23:B1:88:CF:13:D1:0F:4A:33:3C:5F:DD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:12:6c:5e:63:ff:cc:88:51:96:10:14:20:70:b9:3a:04:
         b4:4d:47:7a:aa:70:7e:c3:26:88:87:ac:13:53:08:75:0f:34:
         15:61:36:62:d8:24:94:e0:9f:1c:70:8d:6a:2e:48:34:d0:52:
         7b:c8:13:0e:4f:8f:81:23:34:3a:a0:84:0e:35:ed:b2:f8:66:
         c8:85:f3:04:fa:35:85:c4:b0:c7:7b:59:74:ea:db:f3:41:af:
         65:14:81:91:69:3a:86:51:a6:36:f9:4d:38:9a:7e:8f:73:68:
         4b:72:bc:6f:41:02:44:ed:6e:71:f5:c7:b5:83:4e:04:e2:20:
         f2:8d:3d:b6:2f:d2:57:be:a9:36:85:5c:ed:97:45:21:ac:25:
         10:04:2e:a5:fe:fd:d2:a4:68:d9:65:be:84:28:97:50:86:13:
         06:4d:cf:69:fd:e0:7d:53:02:30:f6:d3:26:6e:e6:da:ae:62:
         b6:55:31:71:d3:1d:2c:66:5a:78:c7:c2:8e:f9:38:19:14:b2:
         17:25:cc:50:de:a0:ac:58:98:2c:ad:34:79:44:1c:b0:12:a6:
         d6:81:91:d1:4f:c4:2e:ec:17:f7:31:0b:b5:72:62:62:cd:c5:
         ae:79:c8:19:c1:a3:24:10:90:88:83:f9:0c:12:d2:9d:12:c5:
         ed:44:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:25 2024 by rpki-client on console-ams.rpki-client.org