Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
File:                     cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa (raw, json)
Hash identifier:          h1i+cmshhQqnOAe741yaNP50vErduEjsTBOqCoZQb1s=
Subject key identifier:   3B:9D:C6:80:FB:C9:55:AC:0B:09:D3:89:18:17:AA:6E:EA:39:29:EA
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EBC655EE616729A28200
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     54315
IP address blocks:        207.54.135.0/24 maxlen: 24
                          207.54.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:eb:c6:55:ee:61:67:29:a2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=de7348f7-f308-4d4f-b926-74ac0e64d5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:64:8b:3b:fc:53:77:16:4e:a4:a9:09:f3:
                    85:a5:4d:f9:60:fc:c3:3d:bd:50:df:3b:9f:aa:dc:
                    c4:fd:e1:8b:f1:7a:88:e9:ec:e8:5c:2d:2e:59:7f:
                    d6:fb:42:8e:6d:6d:64:70:37:0e:68:36:af:44:e5:
                    0e:f1:c4:ef:48:f7:63:b3:9f:2b:e3:fe:5f:7c:e1:
                    56:4b:ad:e9:b7:b1:14:08:6f:a5:88:75:cf:97:23:
                    5e:1b:39:06:25:0f:a8:36:db:b3:6a:de:48:7e:42:
                    f4:64:d1:55:9d:fe:b5:d9:3f:00:ac:66:32:39:ea:
                    6e:8c:0f:7c:77:8f:b5:89:b1:71:ca:48:80:2c:0d:
                    74:2e:d9:c1:da:eb:56:4f:9c:29:a8:11:ce:fd:12:
                    b2:81:2e:30:6f:ae:6a:48:79:80:bd:30:40:f8:4d:
                    cb:ac:c4:83:cd:fd:32:b6:07:fa:5a:b8:9e:fa:e3:
                    6d:af:97:e0:d2:02:ef:96:47:3d:6b:81:c5:d7:f1:
                    c5:1e:e3:bc:04:6c:38:11:32:60:63:c1:19:84:17:
                    27:65:69:b7:ed:71:61:14:2d:f4:77:3f:46:cc:4f:
                    1c:d1:37:30:5b:3c:02:76:fd:17:a8:0c:ae:24:4a:
                    99:0f:fd:7e:b9:e7:a2:61:c7:53:b4:c3:0e:a6:85:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9D:C6:80:FB:C9:55:AC:0B:09:D3:89:18:17:AA:6E:EA:39:29:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.135.0/24
                  207.54.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:46:2f:28:ca:d0:9a:2e:11:03:ae:16:dc:43:53:47:76:d2:
         b6:02:9d:1d:fe:a1:c0:48:7c:b5:f3:98:f6:37:22:aa:03:09:
         52:d0:09:6a:31:33:ef:e7:4d:0a:4e:be:fd:bc:2f:0a:cc:3b:
         b8:3a:2a:82:bc:54:69:fb:a9:21:e8:21:c9:5f:1d:3b:51:63:
         a8:1d:d2:4c:d4:d3:dd:61:5a:35:71:cb:77:2d:0b:d4:39:92:
         1c:f3:36:0b:d4:02:16:52:b3:60:c5:72:b2:d9:bb:fd:49:b1:
         25:82:74:fe:43:86:48:20:2c:fd:d1:64:fe:1d:25:15:91:bd:
         6d:ea:25:2c:7a:5f:a9:e5:2d:73:d4:ae:10:8e:66:18:04:dd:
         ae:8b:f6:88:00:17:70:7f:58:42:9d:6f:fe:24:a8:a1:03:35:
         bc:58:e9:bb:66:45:77:29:85:2d:24:b5:55:3f:47:35:63:51:
         0f:52:ec:32:07:f4:ef:7d:68:8b:c1:19:59:08:4b:4f:45:87:
         80:cb:2c:a4:7b:69:10:48:87:b8:18:c4:9b:57:ad:90:13:02:
         5c:57:96:cb:95:f0:38:74:f1:6a:d6:de:7c:42:46:50:a7:ba:
         78:f8:38:66:e4:53:5d:d9:3b:c2:f6:ff:07:5b:bf:e8:f4:47:
         81:66:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org