Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa
File:                     4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa (raw, json)
Hash identifier:          yxSIJYl4SAFeEgSXXabKJNYPrEPAezNZNXl3ameWg8c=
Subject key identifier:   73:E1:0B:B5:5C:37:3D:F2:2E:22:5D:FB:6D:F8:5C:32:06:FE:E5:C2
Certificate issuer:       /CN=90867e5c-2c8f-4999-a134-dc9418f84496
Certificate serial:       010D0C9F4328584531B29A3858B21CD148C92580
Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     3477
IP address blocks:        140.208.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9a:38:58:b2:1c:d1:48:c9:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=65f4b00d-3a1f-4e89-8026-62c1acbc191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:12:1d:34:f7:18:f7:48:08:58:52:e2:67:
                    e7:c8:8a:0c:f9:92:7b:74:9d:f3:49:75:1d:be:e3:
                    2e:14:f0:42:25:5f:6c:26:d4:12:3a:1d:d2:40:c3:
                    70:08:70:00:b0:6f:4e:49:5d:58:67:e0:ee:fd:21:
                    98:83:e0:a7:e5:9c:73:e4:b5:d2:4a:da:a3:8d:b9:
                    4b:60:0e:a0:73:db:e1:14:80:04:b8:7a:70:30:ac:
                    d5:3e:73:07:cc:ec:58:51:b2:9c:6d:e5:97:c7:3d:
                    44:49:44:0d:62:cc:02:c4:a2:a3:1a:79:56:8e:d6:
                    3a:0a:e6:72:05:41:eb:ed:c5:b6:83:d5:3a:fc:83:
                    24:24:5d:01:be:32:ad:5d:94:e0:af:29:1b:a5:a8:
                    d5:a9:45:77:fb:28:60:a8:03:4a:21:8a:a3:dc:6e:
                    bb:ff:7d:c4:bc:6a:be:43:29:fb:f2:7c:16:df:a1:
                    17:8a:02:85:cf:69:41:91:a8:9a:a9:b1:e2:7a:e8:
                    6f:bc:17:6b:b5:ef:c9:3a:54:d8:a5:77:eb:1a:a8:
                    b7:08:27:e5:42:d7:35:9a:ba:72:b2:80:cb:64:5d:
                    8a:9e:71:30:40:81:6d:4a:d0:4d:e3:e6:dd:d8:17:
                    e2:8d:58:3c:54:63:87:cd:01:a1:4d:60:e7:a5:e1:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:0B:B5:5C:37:3D:F2:2E:22:5D:FB:6D:F8:5C:32:06:FE:E5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl

            X509v3 Authority Key Identifier:
                keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:89:f9:db:27:1e:10:88:e0:36:13:0e:95:90:31:20:c4:
         ca:17:d6:8e:bd:f6:2e:ff:9a:03:3f:0e:2d:e2:8b:22:63:89:
         b1:d1:c7:b6:76:46:70:f3:bd:9f:e3:98:ab:a4:73:6b:8f:e1:
         61:cf:d0:38:3f:9d:26:78:ae:37:11:c5:43:96:3c:5b:c1:a9:
         55:4b:a9:91:91:ad:b9:43:b9:e3:76:60:f1:5a:db:a8:52:6a:
         c5:ec:af:13:b8:b8:51:4f:be:2c:57:b4:d0:3d:e9:fd:8e:54:
         33:ce:95:b3:cc:4c:58:b2:ed:af:50:d4:19:e6:c7:2c:65:5d:
         a4:05:ff:93:35:6d:c3:4d:df:f2:18:22:57:2d:f4:56:d8:67:
         b0:fb:34:cd:f7:c4:55:fa:fe:1d:4c:3f:da:20:90:59:85:43:
         ca:b1:30:6e:83:0a:ad:21:f5:2c:62:ea:7e:63:14:35:9d:d1:
         48:75:5d:4e:de:aa:51:72:98:7b:60:6e:92:7f:06:c0:51:5f:
         ee:38:86:96:26:b1:30:3e:7e:b4:23:15:0f:53:34:17:6b:fa:
         ff:46:45:f9:c1:d9:7c:36:5f:cb:dd:c6:ba:01:ce:c3:cc:a5:
         c1:36:34:82:df:38:d2:c8:41:68:c4:d8:01:21:44:ff:da:db:
         b3:7e:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org