Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa
File:                     31b1026a-02f7-3fb9-adc3-017f9c13f783.roa (raw, json)
Hash identifier:          7xqZAQVGdIieGv/XGI4VvznEmiPrXU11Yz4lf/MSSMg=
Subject key identifier:   BC:96:09:75:62:8C:40:37:44:AD:EB:EC:C4:88:0F:4C:07:D1:D0:ED
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F432858455CF8305FF3727276CAAAA424
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     397913
IP address blocks:        192.153.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:30:5f:f3:72:72:76:ca:aa:a4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=2c69cb69-75a9-496e-88f9-3391ba8fc6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:f4:e8:4b:9a:aa:73:18:72:93:c2:8b:74:
                    2f:7f:08:8c:52:b0:92:3e:5c:70:9d:97:16:b3:8b:
                    9c:c3:fd:8a:ff:4d:56:d7:22:35:7b:85:17:ed:78:
                    06:c5:38:13:56:19:26:a4:f8:e6:94:64:bc:cd:1f:
                    33:48:09:a7:be:ce:5e:63:aa:94:38:33:c3:ba:8c:
                    5b:05:55:18:dd:5e:7d:46:4f:3a:e3:a2:5c:5e:16:
                    0f:b0:fa:86:dc:b1:c9:18:95:3d:07:09:45:13:a4:
                    80:62:35:0a:8a:7d:61:8c:57:b7:f4:e0:db:2b:98:
                    85:69:63:28:45:a7:f5:43:67:67:6c:dc:41:94:80:
                    bc:2a:fa:04:ff:67:4d:1d:8b:e1:ae:3b:03:ed:f3:
                    9c:6f:d1:bc:e9:e4:4d:ff:2e:01:0e:5e:99:0d:14:
                    04:87:d7:9f:4c:b1:5d:1a:6e:c1:22:1c:03:a6:8a:
                    81:7e:cc:5a:f3:a4:cc:c5:f9:ab:bb:56:f6:9a:fa:
                    a9:b7:2f:fb:0d:50:97:bd:a5:b2:f5:a8:a2:38:f7:
                    22:26:1c:10:6f:8c:17:af:65:aa:a5:60:9a:90:b8:
                    46:54:96:59:d8:9d:e6:d9:4d:79:de:98:5c:69:55:
                    b4:60:6c:f3:31:94:ce:f7:f1:2c:71:ce:9f:d4:cc:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:09:75:62:8C:40:37:44:AD:EB:EC:C4:88:0F:4C:07:D1:D0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:4c:9d:65:ef:8a:fb:f2:3c:4e:4f:d4:c3:20:b0:e8:be:
         7b:45:c1:05:71:69:90:d0:27:1d:a8:f5:74:4f:0b:ba:44:34:
         0d:d5:71:e3:f6:e2:ba:53:30:88:f3:ac:53:b2:79:97:8a:c0:
         8c:a5:78:1d:b0:66:44:75:1a:db:22:5b:e6:4e:49:e9:63:6e:
         82:97:a9:36:e7:47:53:06:0b:6b:61:d7:8c:6b:f4:2f:0d:02:
         36:32:05:24:60:3d:f4:c9:f9:e7:5c:73:4c:7a:13:ef:20:81:
         9f:36:91:fd:44:eb:d9:b2:94:4c:67:12:37:63:27:05:66:dd:
         2d:86:4e:b8:f2:fe:fe:c3:36:68:dd:41:95:a9:3b:75:0c:b0:
         12:75:d4:7a:1a:fb:2a:a1:5e:ac:a2:56:d0:64:c2:b5:c3:dd:
         8e:7d:2c:a7:b4:b5:e5:01:68:3a:c0:43:17:ba:9e:52:93:0b:
         97:f0:b2:4a:9e:ac:35:08:70:2b:ea:f0:da:88:da:2e:e5:49:
         1c:2f:99:9e:5c:be:86:7d:3f:49:eb:c5:2a:b6:54:97:36:a9:
         a9:87:d9:28:81:f2:3e:7e:b3:70:3c:9b:bc:ab:e9:8a:fa:db:
         ab:8c:6f:de:0c:13:ae:31:ae:f6:7e:88:11:0d:88:dd:96:12:
         43:44:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:32:49 2024 by rpki-client on console-ams.rpki-client.org