Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa
File:                     027e198c-db7e-372c-b39d-414469965145.roa (raw, json)
Hash identifier:          it+N/25di2mnf3ES5ES/OPIcVvdAVvKUz2okxoHBpiA=
Subject key identifier:   89:D6:56:13:7C:CC:4E:F2:9D:00:A1:4E:84:0B:F5:DF:C2:CE:FA:1B
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285845A160544E30C91D509AFDD600
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa
Signing time:             Mon 22 Apr 2024 13:05:19 +0000
ROA not before:           Mon 22 Apr 2024 13:05:19 +0000
ROA not after:            Sun 21 Jul 2024 13:05:19 +0000
asID:                     400238
IP address blocks:        209.127.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:60:54:4e:30:c9:1d:50:9a:fd:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Apr 22 13:05:19 2024 GMT
            Not After : Jul 21 13:05:19 2024 GMT
        Subject: CN=9256fd0b-d028-4ef8-89ca-40cf30343247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:f4:28:15:8b:fd:7d:44:3c:4b:a8:4a:8e:
                    84:a9:dd:be:9c:3b:77:b3:f4:a0:de:af:4b:e4:88:
                    66:22:49:20:3a:79:82:f5:8c:a1:52:d4:4c:6b:88:
                    7e:60:e4:65:00:02:e5:34:3e:bd:fc:1d:da:f2:18:
                    07:2d:da:9c:4f:a0:c3:a2:ba:0a:13:c8:86:2f:04:
                    67:00:31:7a:92:ce:76:5c:3b:3d:98:df:aa:22:f0:
                    3c:76:b8:e9:b5:77:f5:a4:7e:0a:82:16:fb:fb:62:
                    ff:f9:6f:9f:d5:aa:5a:0b:4e:81:da:f4:1f:71:fc:
                    fe:14:e8:12:fa:82:83:79:02:5a:2f:88:79:e7:ba:
                    8d:8e:33:fd:be:30:d3:79:67:2b:e6:15:20:12:dd:
                    3f:2d:1b:49:b1:ff:dc:8f:a5:19:cd:26:f3:83:36:
                    fd:e4:74:7b:5f:d0:5d:98:6a:7e:bd:88:21:68:25:
                    b5:e2:5b:c1:72:7d:9a:d6:b1:a0:25:ef:11:8f:ae:
                    c4:55:3d:61:72:7f:76:86:fc:73:ba:1d:f8:8c:68:
                    94:d0:3d:63:e9:17:b6:fe:d6:bb:2d:73:4c:f3:74:
                    80:8c:2d:4e:71:61:5a:6c:e7:99:45:0e:e7:c4:ad:
                    a3:7a:ee:ab:08:1e:c7:0a:4f:94:b7:e8:f7:bc:88:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D6:56:13:7C:CC:4E:F2:9D:00:A1:4E:84:0B:F5:DF:C2:CE:FA:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fe:46:10:ed:ef:75:63:3e:c9:81:30:e9:10:12:fa:5a:e1:
         dc:6e:bf:5b:88:00:f4:6a:50:13:e5:42:e4:e5:82:ea:9e:cd:
         ea:b5:86:b2:56:e2:45:d8:4c:1a:53:96:58:91:85:23:68:3b:
         47:5b:e0:bd:23:40:26:9a:3e:0b:de:7a:42:01:99:a2:30:f7:
         75:3e:f4:b7:ec:d7:0f:3f:f1:dc:d8:78:07:d7:51:e5:1c:e7:
         f0:ce:18:75:a7:c1:7f:70:b7:10:37:5a:1b:c2:a0:78:00:f4:
         0c:29:61:a1:b1:74:0d:4a:2b:8c:63:20:d1:ed:0f:be:4d:72:
         71:2a:6a:b6:07:90:4b:88:1a:0b:3c:f7:66:77:00:cc:37:08:
         ac:49:46:52:ee:13:75:9e:10:91:e7:cc:73:aa:49:43:bc:e7:
         a7:9a:a2:67:7a:67:a4:6f:de:fe:3f:9b:fd:f6:5b:4f:68:39:
         0e:74:48:d9:c3:41:73:30:8f:67:a3:95:cd:62:c1:7c:1c:64:
         db:98:08:22:fa:fb:93:eb:00:8b:c2:bd:0b:23:91:72:86:8d:
         ac:0b:d9:88:27:71:c4:4d:7d:36:c0:17:b2:69:80:e6:83:3f:
         c3:3e:7f:b1:72:63:cc:15:57:39:9a:38:dd:88:f0:7a:35:42:
         a6:fd:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:49 2024 by rpki-client on console-fra.rpki-client.org