Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
File:                     dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa (raw, json)
Hash identifier:          LoGyDYWjRfQkVqXdB32bonww4y+SGooX0tIhD+h9rtw=
Subject key identifier:   E6:97:3E:BA:E7:4E:53:45:C7:AD:0E:50:47:16:D3:E3:8A:1D:40:F3
Certificate issuer:       /CN=63772934-17e5-40fe-9a28-6fe830808dc3
Certificate serial:       010D0C9F43285845496D5EDE18966F56E177E040
Authority key identifier: 51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     396982
IP address blocks:        161.38.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5e:de:18:96:6f:56:e1:77:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63772934-17e5-40fe-9a28-6fe830808dc3
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=a0598956-6d79-4d61-982e-3472d5873bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:70:30:50:e4:dc:0a:01:98:5b:48:a0:0b:
                    11:db:3a:c7:8e:27:dd:33:9e:c1:4d:b6:f4:36:30:
                    f9:ed:69:0e:2b:0d:00:85:63:f4:69:ae:25:3d:4a:
                    b3:7e:1d:92:b6:df:18:0c:ac:f8:ac:88:54:3a:92:
                    10:9e:47:fd:cb:29:90:fd:1c:93:2e:19:0c:98:52:
                    d3:6d:03:44:57:91:34:ff:54:af:29:05:51:af:6e:
                    82:f3:11:34:9d:16:22:19:85:74:24:cc:27:0c:53:
                    16:0f:3d:35:35:51:2d:7e:e4:d2:ad:e1:35:f4:d5:
                    30:41:53:d2:50:e6:76:da:93:e1:45:b8:5e:99:23:
                    96:5c:19:84:b0:e1:2f:28:14:29:2c:34:44:0a:dc:
                    79:10:98:ef:bf:fd:23:13:3a:1a:3c:6b:ce:1b:ed:
                    13:64:30:62:e2:1c:5e:ae:a5:77:75:1d:80:7f:b4:
                    b0:21:65:52:93:c2:9b:48:f5:5c:4a:28:5c:c8:29:
                    bf:8c:8b:51:26:fc:da:2a:e7:c2:59:d3:ba:f8:d7:
                    8d:5b:ec:0b:17:8c:e8:ad:e3:f8:45:39:b3:93:1b:
                    0e:ca:49:41:d8:8c:9e:cc:a5:d5:84:33:7a:43:a9:
                    b4:bf:78:cf:91:c7:d7:57:ca:22:f7:3e:5e:51:e3:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:3E:BA:E7:4E:53:45:C7:AD:0E:50:47:16:D3:E3:8A:1D:40:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:a1:4b:22:b2:75:5b:b0:73:34:0e:b7:85:a2:48:fe:91:
         5b:65:4e:9b:1b:2c:e8:7d:05:9b:aa:86:15:3a:a2:17:f7:04:
         47:66:47:78:f8:f9:ce:b9:45:3a:fe:0a:60:62:43:40:e5:95:
         00:42:47:4e:34:3e:5b:b3:d4:5b:f9:67:9a:b8:c7:e9:e7:a2:
         83:f5:58:91:f0:0e:ac:3e:2c:19:13:c4:cb:d6:b0:87:36:2e:
         2e:9a:0e:01:5d:78:62:c8:a7:60:2e:48:11:5d:0c:e7:b5:6b:
         2c:2a:87:c1:b3:41:ec:c3:ef:91:21:6a:2a:8a:22:1e:94:a9:
         1b:c6:0c:01:98:e8:93:e7:76:74:0b:0d:d6:cc:64:3a:f4:ea:
         b6:5c:9a:2d:56:5e:0f:07:73:3b:53:c1:c0:32:98:ae:28:60:
         c2:e0:74:07:05:4b:c8:6b:f0:70:73:20:aa:75:da:5a:70:2a:
         f3:03:bd:a0:3c:d3:12:f6:d4:dd:c8:e1:65:2a:33:7a:ba:b7:
         e4:1d:f6:ba:49:76:30:46:f7:44:ec:5b:cc:87:6c:97:1d:86:
         15:34:50:93:cb:67:a6:f9:b9:5c:14:3d:79:9c:ea:b1:ec:8e:
         0c:fa:db:40:2f:85:b7:aa:2a:1d:4a:0d:9c:09:b2:73:71:e2:
         57:ca:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:31:40 2024 by rpki-client on console-fra.rpki-client.org