Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa
File:                     e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa (raw, json)
Hash identifier:          u7kLbzF9KZDH0I36K1CxgpdbhPt0x5mZsUspeyr9Z84=
Subject key identifier:   A4:D6:09:B2:58:78:31:C2:3C:57:91:96:C9:6F:FE:72:B9:2A:C8:33
Certificate issuer:       /CN=83451658-cf40-47b6-b4dc-03c0565c4a64
Certificate serial:       010D0C9F43285845280AF8EEA92CB581AD9B00A0
Authority key identifier: 2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     40345
IP address blocks:        204.44.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f8:ee:a9:2c:b5:81:ad:9b:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83451658-cf40-47b6-b4dc-03c0565c4a64
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=fa82db23-29cc-447f-a57a-ab239bd9fde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:3d:e9:31:8a:ea:1f:e5:c4:99:be:3d:b6:
                    33:73:7a:75:60:6f:7e:4b:0e:0a:f4:e1:c9:6f:64:
                    b2:32:cd:ff:98:04:da:30:ad:8e:da:12:fe:bb:c8:
                    67:03:8c:06:98:a8:95:6d:8b:50:cd:43:d8:26:9d:
                    72:78:34:c2:8a:29:04:aa:0b:26:d3:5c:d6:87:16:
                    a1:7d:8c:89:44:c7:b2:b5:d3:95:6e:34:d6:b4:2a:
                    15:8c:a6:72:3d:7e:b4:47:6f:98:9d:cc:ab:e9:fd:
                    b0:b2:5b:a9:d6:dc:bc:7c:7d:e9:bf:48:ea:94:fa:
                    50:21:00:42:87:1e:0a:51:2c:c7:6c:79:d2:4c:77:
                    b0:09:ae:70:9a:ab:b9:8c:78:a9:ea:33:e3:05:71:
                    4b:f4:23:1e:ab:be:7b:80:bb:f4:c8:6f:e6:dc:f6:
                    81:8a:b7:c2:5c:53:17:d4:2d:3e:07:bb:c8:bd:6f:
                    9d:aa:44:c2:d3:cc:4d:7c:18:37:cc:ef:ed:b0:c6:
                    a2:5b:42:b6:25:b3:2d:72:9a:b3:4a:1b:43:0e:dd:
                    14:85:29:e9:a3:df:50:61:4e:81:22:52:f2:d9:60:
                    9f:0c:23:ff:ef:84:08:f1:aa:0f:6c:39:49:3a:81:
                    da:11:af:55:ae:8a:0c:ec:bf:00:54:ab:80:28:58:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D6:09:B2:58:78:31:C2:3C:57:91:96:C9:6F:FE:72:B9:2A:C8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.44.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:53:b6:9c:3a:b9:10:0a:55:96:23:c2:7b:b9:f0:43:ee:e3:
         21:7c:1e:04:38:6a:1b:8c:25:81:c3:8b:20:81:7a:22:4f:98:
         36:eb:5d:85:7b:41:97:1c:42:6d:3c:d0:ca:08:eb:94:cc:3d:
         e8:3b:f0:7c:fa:78:4d:d2:e8:e3:dd:a1:eb:3c:70:ab:0f:ff:
         f4:aa:99:42:69:b9:2a:b8:6e:35:a5:1b:de:b8:82:b4:1c:03:
         56:6d:03:26:14:eb:75:2d:7f:0e:c3:2e:e8:41:42:da:bf:1b:
         44:bc:74:35:56:c1:a1:ed:0e:a9:5a:f7:0f:d4:40:b2:68:62:
         68:c8:12:2a:44:2b:eb:ed:97:cd:14:e8:13:02:b1:de:57:55:
         3c:86:a0:4c:3a:85:c3:f9:61:d6:31:30:bd:f2:92:11:f9:d4:
         a9:47:04:59:23:88:fb:3b:a1:bd:51:fc:30:cf:d3:22:0e:56:
         93:61:54:2c:72:7f:cb:b6:9a:f2:ce:72:d1:43:64:91:d1:e8:
         db:84:fb:1b:97:99:6b:b4:df:da:ce:b7:c5:16:0b:43:6a:72:
         6e:1f:7a:f0:ed:1f:d9:b9:1e:af:e5:a8:17:74:9d:80:fa:9a:
         00:a4:fe:da:3e:d0:60:d1:4e:a0:27:67:65:2f:9f:26:60:e0:
         e3:c3:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:03 2024 by rpki-client on console-fra.rpki-client.org