Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa
File:                     af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa (raw, json)
Hash identifier:          chgyvAQ/YkfpNnF6XJdnX1g+59D/YHwj3ApUrwu0QfM=
Subject key identifier:   75:ED:8E:17:53:61:D4:12:F6:C1:D1:33:20:4D:BD:E7:9F:A1:7C:2A
Certificate issuer:       /CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Certificate serial:       010D0C9F43285845840DC1F4156799D02C7A8D00
Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        146.71.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c1:f4:15:67:99:d0:2c:7a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=0182ad9a-ebee-4949-8ca8-a70b3e036662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:b4:e1:2f:45:e7:1f:87:3b:dc:c1:ad:c3:
                    40:b9:47:92:59:0b:a7:eb:c4:13:2b:cc:3a:4b:1c:
                    86:3f:75:49:f8:0b:39:7e:3a:66:6c:5b:0a:c0:cf:
                    b6:68:1f:a7:d2:67:08:73:9f:28:f0:f3:c6:e2:b3:
                    98:2e:f0:9f:e1:2b:00:6e:b4:96:59:d3:db:81:b5:
                    6c:64:58:8a:c1:44:df:c1:fa:cc:48:e7:6b:d2:37:
                    f5:3e:cb:c6:80:b4:59:9f:4f:42:82:1b:76:40:05:
                    e8:f9:b5:d0:93:53:c4:6c:32:17:42:e4:28:49:55:
                    85:6c:9d:06:31:ad:b2:9a:f0:11:b4:41:73:ff:1b:
                    94:ca:44:98:72:92:82:2b:98:75:0a:d6:c6:0a:af:
                    3e:31:6c:4a:f6:76:3b:88:cc:14:bd:38:22:92:39:
                    e3:f0:dd:56:1a:86:93:e3:77:04:53:74:54:85:1b:
                    11:ae:be:42:b7:95:ea:1b:32:7b:0a:e9:1f:4d:9f:
                    52:ab:fa:14:29:14:de:c1:00:3b:51:95:ad:8d:fc:
                    dc:55:5d:ec:54:a8:1c:05:c2:01:d5:18:da:02:ca:
                    91:3c:e8:fa:c4:3b:61:ed:90:e8:30:40:5f:65:6d:
                    5f:08:7e:57:f9:90:9b:71:da:57:d0:60:ba:9b:09:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:8E:17:53:61:D4:12:F6:C1:D1:33:20:4D:BD:E7:9F:A1:7C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl

            X509v3 Authority Key Identifier:
                keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:e1:8a:d6:c1:84:15:52:16:74:53:53:84:e7:43:1f:76:
         b6:06:aa:4a:e7:e1:ee:3e:f2:19:b9:9d:06:58:f6:be:0e:bf:
         60:7b:8e:c2:63:ff:da:16:24:b8:5c:45:ca:ec:5d:81:40:5c:
         01:19:68:01:7b:94:26:45:7d:aa:6b:22:15:23:bb:37:ee:ef:
         5d:aa:4f:1d:1e:24:80:bc:68:fa:5c:ac:5a:e1:e0:9d:34:16:
         f4:ab:5d:36:2e:2f:6a:14:f1:c8:af:2d:db:fb:25:be:d9:f9:
         bb:f0:d1:12:c9:15:59:98:fd:fb:4b:a4:7b:e9:ed:45:26:b3:
         03:1b:41:ff:14:7d:2b:7d:fa:90:58:ab:f5:7f:e9:d3:da:44:
         a2:58:00:73:90:5c:0d:51:3c:d1:87:32:1b:75:bb:0e:27:5d:
         49:db:01:6e:00:2e:df:7d:4d:d4:0e:56:6a:b9:09:f8:4c:97:
         a1:f2:e3:47:5d:65:a1:6d:f4:18:11:3b:db:01:eb:95:22:56:
         6d:69:db:90:57:02:c5:0c:45:b0:fe:cf:77:fd:49:aa:67:e2:
         90:90:3c:6f:d4:8c:e2:1d:e5:79:5a:9c:f7:91:8d:60:b6:99:
         1a:e2:e2:3d:87:d1:04:6f:f3:8b:5b:87:c7:13:5e:6a:c7:84:
         bc:ff:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:21:09 2024 by rpki-client on console-ams.rpki-client.org