Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/f639a151-bb7f-3834-97b8-92f640b46975.roa
File:                     f639a151-bb7f-3834-97b8-92f640b46975.roa (raw, json)
Hash identifier:          QD9GHs5qdFo/byzRBquILbaV/TjyupqTRQd/5/0uyhA=
Subject key identifier:   61:73:1D:97:0A:1E:A9:E2:64:6F:B9:5A:0D:30:66:1F:E6:3F:22:81
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F43285845A9BE118CB0CEDFF80A63B980
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/f639a151-bb7f-3834-97b8-92f640b46975.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     399007
IP address blocks:        146.12.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:11:8c:b0:ce:df:f8:0a:63:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=b4365a6c-6fad-4562-b501-1f58b242ad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:f4:18:07:07:7e:5b:51:43:08:1c:ab:6b:
                    d2:ec:d4:b5:73:e0:c5:aa:24:5e:5b:68:57:b5:9c:
                    2c:4d:74:71:83:97:07:f2:33:99:46:9f:f6:ef:b7:
                    3c:9d:24:db:0d:36:f6:73:9a:a1:ae:e7:ca:64:f3:
                    b1:89:36:8d:a3:bd:a8:99:ac:ee:f1:26:2e:db:14:
                    96:63:21:b0:cc:3e:0d:fa:d4:87:34:15:de:a0:14:
                    ef:47:68:82:93:81:6c:c6:b3:9e:a8:9b:b3:1f:0d:
                    f9:03:b0:d3:2f:c5:e8:a6:84:e1:c4:ff:ac:09:6d:
                    8e:6d:e1:18:70:3e:0d:89:65:b6:57:74:15:79:d3:
                    2a:06:29:8e:1b:3d:ca:6e:a1:19:ab:df:5c:c0:0e:
                    a3:c4:98:54:14:c0:5b:28:e5:4f:ec:21:15:41:b2:
                    50:b4:4b:be:fa:80:b1:d2:71:73:0c:29:34:5f:e5:
                    f5:8c:09:e3:26:2a:7d:d1:b6:06:b2:90:30:60:92:
                    3b:93:2c:55:38:37:97:53:dc:f1:8b:2a:c3:37:b6:
                    35:05:18:4d:5d:fa:ea:45:0b:06:74:e2:3e:97:6e:
                    3b:d6:e2:3a:44:2f:7c:b4:c4:a0:60:a3:87:99:1a:
                    6e:52:89:ee:88:67:a0:5a:0a:3d:96:f6:db:5c:00:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:1D:97:0A:1E:A9:E2:64:6F:B9:5A:0D:30:66:1F:E6:3F:22:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/f639a151-bb7f-3834-97b8-92f640b46975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:65:36:77:ff:d5:87:db:13:21:00:ba:ef:55:4f:42:c3:
         d4:3f:91:6e:29:42:ce:54:cc:57:88:54:79:23:a1:aa:07:4c:
         cb:8a:24:43:ee:d9:04:87:8b:b5:2e:9f:20:18:c3:07:1f:b3:
         01:68:b0:c8:46:fc:1a:d8:5c:01:ac:ed:40:20:07:40:78:ab:
         8e:e6:4e:ea:0d:6d:06:6f:8b:92:cd:00:64:12:43:b5:65:65:
         d8:45:68:be:47:cb:65:11:7b:53:e0:db:e3:51:1a:98:21:de:
         f1:ac:7f:ac:e4:c1:79:e2:a2:e3:71:1a:f4:76:2a:28:bc:61:
         df:c5:e8:57:26:30:82:7d:8b:91:e5:d6:f3:2b:f5:a1:2e:be:
         bd:96:5c:4c:37:98:49:f4:81:74:27:b4:d8:f0:92:26:b5:d9:
         ac:77:e3:6b:d9:ef:02:f3:f8:a4:bb:40:38:4e:e2:57:76:4f:
         3a:d0:f8:63:96:78:52:be:b5:57:e5:65:d9:83:19:f0:6b:f1:
         b0:6a:35:0b:a7:dc:81:c2:4a:0b:54:7b:31:91:53:23:ba:71:
         e9:56:fd:4c:b4:08:34:f8:9a:9a:b7:a0:43:99:5d:08:71:0d:
         6c:c7:4f:ff:77:77:ae:fc:e8:52:d5:df:e2:28:1b:e5:d7:f9:
         ca:3a:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org