Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa
File:                     40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json)
Hash identifier:          3OkayeKk3yaIqhNCW8bmRqeoQYQjwgLxm8tMSD2iBPc=
Subject key identifier:   A0:BC:C7:1D:1F:B0:5E:DE:69:EA:94:F8:65:E2:7C:DB:C5:B0:36:6C
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7E8379BE88CA02C5BAB80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     30610
IP address blocks:        209.166.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e8:37:9b:e8:8c:a0:2c:5b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=b2b99ca2-173c-4aef-bffd-4c8c66df7d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:00:87:17:56:62:4a:c5:51:68:2f:1b:12:
                    46:82:32:6f:b4:73:ed:f9:c9:72:c7:94:e4:38:e3:
                    2f:64:1b:66:43:42:25:a0:01:6c:33:b7:f2:19:9c:
                    db:dc:f2:59:f4:c5:38:78:f1:dd:84:10:49:7b:8f:
                    7d:c9:6a:2e:79:e6:3f:30:9e:19:00:83:7b:d8:f2:
                    bf:89:3c:b9:9d:1f:a2:46:a7:99:e6:0d:45:40:a5:
                    35:b7:a8:84:c4:29:42:8f:ac:a2:87:f6:10:c5:be:
                    4f:7f:76:e3:81:71:05:19:01:97:58:9a:97:c2:ea:
                    92:5a:ba:a4:79:68:f1:53:e1:77:a0:f6:98:5b:c3:
                    80:09:be:66:b7:d1:32:65:be:95:6b:1f:8c:d8:fe:
                    65:2d:2d:5e:8a:4a:69:10:83:78:af:9c:42:3a:67:
                    f5:65:de:7e:fe:3e:79:a2:f2:fa:7c:e2:e9:21:36:
                    84:33:c7:7a:b3:ca:70:a2:5d:76:aa:5b:e7:f5:45:
                    68:1d:d8:0a:82:6d:6a:29:c4:8c:f9:e9:04:aa:96:
                    5d:1f:01:f1:cd:f9:44:8d:b5:8c:9a:ca:99:2b:ac:
                    2d:73:e1:a2:a4:7d:44:77:98:54:9d:18:fb:28:c0:
                    29:27:b0:94:30:81:fd:81:f4:82:34:26:ae:42:df:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BC:C7:1D:1F:B0:5E:DE:69:EA:94:F8:65:E2:7C:DB:C5:B0:36:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:77:93:b9:bd:db:e7:1b:54:58:fe:94:67:a7:61:2f:3e:17:
         1a:65:9c:9e:0f:f8:2e:b7:1c:74:6d:ee:ec:99:a5:e7:28:24:
         56:9e:18:f5:61:4d:9e:61:0e:47:27:e8:25:24:8a:5e:1b:15:
         78:60:b8:13:7c:7d:5d:37:82:61:5e:e0:c5:b0:db:71:08:58:
         30:1f:d6:bc:90:53:88:fa:60:85:4e:7e:05:ba:04:d8:13:ba:
         c4:ef:a1:a7:4e:97:75:2b:0a:68:b5:38:8d:e6:f9:a2:9e:1b:
         8d:51:3e:9d:7d:05:51:fa:d6:93:c7:f8:3b:9a:87:37:e2:92:
         5a:00:cf:41:e2:a4:3f:fa:66:b0:82:55:6d:7d:12:b8:51:87:
         69:f3:e5:f7:4c:e7:00:b3:78:d8:4a:67:eb:7d:f3:eb:e1:fc:
         07:89:35:15:62:68:88:c2:cb:3f:bd:4b:27:4e:e3:7e:f3:8e:
         98:a9:bd:ba:c0:ba:57:27:fb:84:77:16:b7:ee:48:43:ab:1c:
         85:9f:82:c7:3f:28:8c:10:9f:6c:99:d4:f4:6a:65:59:15:dc:
         11:06:50:48:ed:b0:4b:53:2b:09:0b:fc:05:d1:90:04:70:91:
         5a:0e:71:8d:b7:f4:08:87:1a:5e:ce:cc:42:0f:32:e4:cb:6f:
         83:c4:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org