Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa
File:                     e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa (raw, json)
Hash identifier:          splhv5/kM1eiZNA59X+Kw3BemD19idP7x61mgl/Hg2s=
Subject key identifier:   10:C6:9C:2D:55:53:B7:68:A4:34:2C:30:35:F2:59:A3:91:7F:F9:DD
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F432858457FDDD4F3B7B2753862391080
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     19257
IP address blocks:        138.229.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d4:f3:b7:b2:75:38:62:39:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=146036f9-ea1b-443e-8f1f-8a415c544461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:e4:8a:db:a1:3f:6f:38:20:2e:8f:b8:04:
                    ed:57:36:d4:0e:36:e0:e5:85:f9:47:66:dc:df:2a:
                    9e:cb:62:43:a2:03:46:93:8e:f3:8f:95:a9:3e:80:
                    7d:cd:cf:7c:94:42:4e:8a:4f:76:1c:25:21:1b:a6:
                    97:7d:6a:01:9a:a8:30:ff:57:23:fe:6d:21:4f:bf:
                    e9:d6:71:ef:2c:17:0a:ff:69:5e:a7:9d:94:9a:9d:
                    08:50:eb:5a:6e:94:56:bd:06:63:27:74:b6:ea:72:
                    e2:60:ce:f1:e7:34:37:fe:23:c4:89:3b:ba:ed:9a:
                    b9:b1:b4:03:9c:9f:2d:00:c1:aa:3b:5d:fd:c8:98:
                    5e:64:96:25:64:9b:7d:2f:8e:d6:65:c7:98:c0:fe:
                    f6:db:a8:4c:1b:64:2f:5b:3c:67:29:a8:44:31:88:
                    af:5e:cc:59:9e:2b:98:6e:ff:86:4c:a8:19:d4:c5:
                    f4:96:70:91:86:5c:d7:4a:e9:25:87:38:3c:4f:db:
                    11:7b:5a:a5:3b:ab:c1:92:a0:b1:c4:0a:66:96:60:
                    ee:dc:2e:f1:bf:54:b0:c2:db:cf:43:86:ec:4a:24:
                    c5:bf:2b:f4:4b:a0:fc:da:84:ad:82:d1:90:56:11:
                    f0:29:b2:b6:53:fa:77:32:cd:8e:53:91:c2:ec:4e:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:9C:2D:55:53:B7:68:A4:34:2C:30:35:F2:59:A3:91:7F:F9:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:65:e6:e9:8f:28:0d:cd:db:cb:f1:79:5d:f1:2e:43:df:
         0f:4a:14:b0:ab:08:f3:48:ca:e1:79:a0:9a:50:25:74:63:c2:
         0f:08:19:9d:6f:f2:8e:27:c9:4b:4c:bb:a6:91:b2:9a:f2:68:
         f2:fc:28:d0:7a:48:f9:45:f2:9d:33:83:98:d1:40:54:77:ee:
         26:9d:cc:76:4a:4d:19:77:3d:be:6b:d3:2d:5d:bd:e6:ad:11:
         37:b2:26:f0:05:a7:af:59:39:17:33:7a:b4:b8:c8:7b:62:a4:
         95:5e:a0:ed:4d:d5:2b:e6:93:48:9e:05:1d:40:51:20:79:50:
         b7:8f:22:8b:58:8f:66:77:15:e3:e5:11:0f:cb:03:f9:7b:20:
         6b:01:02:53:c1:76:d0:e3:fa:44:bb:e9:d1:27:d9:64:90:1a:
         27:e5:c0:93:ae:8c:6c:96:73:41:f6:0d:b0:bb:13:34:64:43:
         4c:a7:27:d2:16:f2:e4:04:36:51:1f:3e:c5:c5:66:a9:83:49:
         e0:01:b3:eb:7f:c9:bd:dd:90:3f:45:3f:50:e1:3d:9e:d0:20:
         bb:3a:d9:16:eb:9e:c6:c5:72:7b:ef:db:e6:bc:4e:ca:2d:2a:
         12:a1:4a:5b:83:6e:7c:9f:51:06:15:8c:8f:f7:ee:09:79:08:
         02:fc:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:48:45 2024 by rpki-client on console-ams.rpki-client.org