Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa
File:                     a5813508-28da-316e-9e85-47818567b716.roa (raw, json)
Hash identifier:          3k6aP+oBuA7zkEyZux4PEGW+RLhLdL3sXJSZznhRTgE=
Subject key identifier:   2E:54:8C:ED:F8:10:F1:5B:0E:36:E7:8B:3A:00:87:25:EF:98:49:0A
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584574B319E6728093E22E8D8B00
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     25649
IP address blocks:        198.207.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:19:e6:72:80:93:e2:2e:8d:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=63425be1-0fb4-43dc-a83d-572758230da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:f6:0a:1f:85:fb:f3:05:35:fb:2d:a8:fb:
                    8a:d8:83:13:82:6c:4f:fb:dd:3a:7e:39:d8:b7:b9:
                    fa:f2:dd:0b:42:65:92:bb:ec:5e:93:a0:e7:af:b0:
                    a6:a0:61:7e:e0:07:99:9d:68:75:08:f6:c8:f9:bd:
                    b5:8f:50:30:08:83:4c:92:c4:f8:cb:01:54:01:9b:
                    5d:31:7c:d0:7b:59:9a:29:54:f6:01:1b:54:b9:cc:
                    70:98:e7:a1:84:e0:d3:11:00:b4:32:48:33:8a:2f:
                    5b:79:18:ef:83:c7:c8:43:da:87:36:4f:ae:d9:c5:
                    2a:5c:64:c0:a7:b2:9a:b1:1d:9e:ae:43:0c:e7:11:
                    8a:9c:2b:10:b8:5a:2e:a4:18:d0:ce:ea:ad:1b:4e:
                    40:5f:01:d3:62:8d:68:7c:c1:1f:c3:47:01:2d:2c:
                    ea:40:04:83:34:ec:0a:5c:70:4b:f6:5b:f7:1c:a0:
                    e6:0d:be:40:d8:d0:c7:26:e5:f2:a2:6a:e0:c6:8e:
                    05:85:1b:ce:25:7d:02:a7:c0:4d:97:54:72:b8:c4:
                    56:55:85:68:9d:06:cb:87:93:30:12:2a:c7:e2:1c:
                    5d:f2:5e:07:a7:11:7e:ce:11:b6:53:30:23:13:89:
                    3c:19:8b:8f:78:18:10:6c:9b:04:a2:93:49:89:35:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:54:8C:ED:F8:10:F1:5B:0E:36:E7:8B:3A:00:87:25:EF:98:49:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:c8:82:66:f9:be:56:d2:1e:7c:14:e1:21:24:4e:1c:20:
         2e:84:f1:47:5f:b9:6b:df:ff:d2:69:ff:ab:6b:f9:5c:67:56:
         b3:75:a4:6a:a9:b7:50:c2:95:9d:0a:90:40:0d:1b:83:da:b8:
         61:91:19:98:9b:94:9d:f9:f9:53:a6:6d:be:88:7f:f5:87:be:
         1a:bb:12:8c:90:87:09:7d:e8:dd:06:11:be:4e:54:df:db:3b:
         ae:8f:63:0c:4b:19:0c:15:d2:e7:24:d0:3f:b9:70:79:8f:2a:
         66:be:52:3f:ac:f7:2d:69:08:b1:42:69:0f:75:5a:52:1b:71:
         af:6e:da:f8:cd:93:4f:24:ad:86:56:22:8e:2c:ab:2d:67:d3:
         64:03:c4:ff:c1:ac:28:4a:34:55:52:c3:42:7b:90:d5:61:ef:
         ea:15:29:7f:f6:bc:b1:21:09:cd:b7:77:6e:bd:88:b3:39:c6:
         30:3c:76:42:f9:33:52:3d:47:14:dc:f2:7c:39:f1:39:8d:c5:
         6c:b1:dd:c0:bf:a9:f3:5b:c9:3e:22:4a:f7:bf:30:56:1b:cf:
         1d:01:cc:e3:7f:7e:da:89:31:4a:62:ea:83:10:3d:f7:7c:c7:
         f4:ea:d9:e7:61:7c:1e:8d:ea:94:41:05:bd:e1:f6:75:77:b7:
         b5:d6:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:59:49 2024 by rpki-client on console-ams.rpki-client.org