Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa
File:                     0c45ef52-daa1-3e19-af05-19d477054b64.roa (raw, json)
Hash identifier:          treiVjEufMF1HPMpGM1toxYfu0W9uAt2yq3WrBLZ+1I=
Subject key identifier:   3F:2A:F8:FD:5A:13:B4:F8:7D:28:61:4D:E9:DB:6A:73:99:B4:26:02
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F432858454C380E370E82FE389FE28B80
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     9009
IP address blocks:        168.91.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0e:37:0e:82:fe:38:9f:e2:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=61de724d-58eb-49d9-b1a9-a0fc7a632b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:4a:6b:8e:6f:3c:53:28:31:38:56:3e:20:
                    46:e2:18:7d:4f:8f:e9:bb:20:5c:65:70:a8:59:02:
                    ea:65:b4:3b:cc:31:76:cb:ae:51:32:ee:f6:24:6e:
                    27:81:1e:ac:45:01:31:60:24:a3:68:12:b3:95:4b:
                    77:d4:b1:ac:7d:e2:77:00:16:13:4e:6a:95:98:a7:
                    c8:7a:21:c1:0d:35:6c:38:aa:ca:fa:c2:8e:8c:7d:
                    63:40:55:46:76:e7:67:41:35:1d:ba:83:05:7e:fc:
                    72:d1:f1:c2:03:1b:54:eb:60:28:cc:18:45:4e:09:
                    7d:fb:ab:8f:aa:38:d2:b3:9d:77:cc:0f:37:90:54:
                    ba:d9:8b:3a:3f:9e:59:c2:47:03:b7:7c:25:a3:70:
                    f4:bd:12:88:20:ed:ec:93:19:7c:63:e8:39:69:ea:
                    64:80:0e:49:ad:9a:99:21:07:c5:29:1a:bc:4b:e4:
                    6d:4d:f1:34:de:10:15:02:4f:0e:9f:ff:23:ec:63:
                    78:3e:7d:07:09:b8:38:a6:79:46:de:40:2a:3c:a1:
                    bf:34:f7:81:49:50:fb:91:4e:74:c2:c9:8d:a5:d5:
                    9c:2d:3b:b7:f4:86:d3:7e:c2:6f:f2:bc:94:36:22:
                    6c:cf:8a:ce:4b:33:56:7f:e7:5f:06:6f:db:3f:22:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2A:F8:FD:5A:13:B4:F8:7D:28:61:4D:E9:DB:6A:73:99:B4:26:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:91:ff:25:09:ca:49:49:68:90:c5:31:a9:d3:b0:90:e0:4d:
         4e:22:44:52:37:c1:45:c4:79:05:2e:0c:79:98:87:78:d7:9b:
         a4:79:ca:9f:38:ad:e5:93:e1:1e:78:87:8d:4c:3a:c3:44:b5:
         e6:92:ab:ed:e8:e5:17:95:b1:31:fc:64:52:42:07:0b:f0:78:
         93:90:88:e9:34:ea:b4:b3:0f:20:40:fb:64:d7:95:64:ca:48:
         81:6c:e3:09:56:46:16:58:b8:e1:61:08:1e:f4:71:2d:27:23:
         72:f8:bf:c3:32:12:68:b2:2d:ab:33:76:32:c6:e4:8b:dc:fb:
         6b:fd:85:54:89:84:c1:45:d2:94:69:79:a0:20:54:cd:92:66:
         dd:2a:ea:e7:19:f1:eb:e3:30:4f:1e:32:9c:05:6c:3b:b3:a9:
         f7:25:2c:a5:3a:99:df:d0:4d:b0:f8:69:ca:1e:93:00:29:d7:
         c3:91:33:b7:fd:39:44:ad:55:66:04:fe:50:79:66:c4:a6:bc:
         7f:2a:71:31:0d:61:77:1a:f8:1a:cb:65:f5:b0:ce:55:d5:56:
         2f:c7:65:38:bd:73:99:99:21:9b:ac:b1:6c:d3:a0:17:03:9c:
         38:06:44:5b:16:2f:53:b3:ee:10:d5:60:8b:37:d9:63:b6:b8:
         05:c1:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:55 2024 by rpki-client on console-ams.rpki-client.org