Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa
File:                     2ee8a464-6695-36ce-a17a-4259e130ff8d.roa (raw, json)
Hash identifier:          WyfSr6PhkGt5CdN4jOpAt2BZnHyzXRnAIuXpcOV4Ch8=
Subject key identifier:   68:E8:18:B2:A8:D3:73:2B:CC:30:A3:E1:B8:CB:D5:E2:9F:80:EF:38
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285845D39E63E24CCF3A23823D3E40
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     46931
IP address blocks:        72.46.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:63:e2:4c:cf:3a:23:82:3d:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=bf951ff0-5064-484c-b361-e4d7c2e1f9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:a7:ed:ce:7c:dc:30:00:b4:27:50:c9:21:
                    60:9a:07:ec:13:b7:8a:94:65:d3:c2:72:1e:d6:ca:
                    dc:6c:47:32:5d:ce:c3:22:e9:93:4c:ec:42:13:d3:
                    19:9c:db:65:8e:d3:62:99:3d:83:b7:cf:5f:a8:60:
                    5a:08:6f:d2:2b:a5:1a:97:aa:ee:ab:34:44:fa:79:
                    9b:1d:7d:bd:5b:19:eb:38:ce:3e:a2:a0:60:17:72:
                    ba:01:aa:e6:b1:de:93:0b:7e:41:61:16:a9:da:fd:
                    77:be:f1:25:00:c9:60:81:73:68:54:88:6a:c8:c2:
                    4f:2e:6f:39:9d:df:ce:2f:5a:21:99:2c:aa:d3:83:
                    0f:b8:2f:99:1d:9f:1a:b7:93:67:b8:07:f6:fa:d6:
                    06:6e:6a:b6:58:81:74:8b:59:37:8e:2b:53:a0:6c:
                    c9:94:37:dd:2b:63:2d:52:77:f5:8f:14:01:18:23:
                    c9:b9:47:cd:7b:82:6e:c5:33:97:47:5e:a1:66:52:
                    35:5f:e4:22:31:da:f2:f4:5c:dd:29:78:4f:2c:50:
                    4f:ce:02:9f:e5:fe:f7:b1:2d:b4:64:1c:34:2d:4c:
                    e9:76:8a:69:68:43:16:5f:c6:ab:3a:c9:dd:2d:b3:
                    11:40:9b:83:d7:72:ba:b1:9d:b7:22:29:0d:04:62:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:18:B2:A8:D3:73:2B:CC:30:A3:E1:B8:CB:D5:E2:9F:80:EF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:d4:94:9a:cd:d7:38:ee:40:66:91:15:c0:a3:6f:6f:58:
         94:69:81:4a:d4:b9:83:88:93:5b:61:8a:84:71:b7:d3:8d:f3:
         25:1c:71:97:e7:19:04:0a:af:3c:b2:0f:74:d3:2d:14:c9:73:
         34:ef:67:6f:7b:ec:ca:24:d4:05:95:bb:52:e9:ee:49:33:0b:
         06:47:65:0b:b6:96:54:8b:9c:d5:fc:17:ee:67:c1:37:47:11:
         8b:87:8b:b8:14:94:5e:06:b7:ac:ad:fe:f4:a1:8a:99:38:83:
         6b:47:eb:4f:f8:1b:bc:f3:f5:c5:f6:8a:36:88:5a:fe:bb:6b:
         e5:36:aa:b6:15:2d:e9:a2:bf:a7:8b:65:d7:0e:2a:8f:81:c1:
         f3:36:f2:91:53:9d:2b:52:b1:88:60:12:f7:72:60:fe:f2:8e:
         f9:18:2d:a5:36:f0:c7:d6:3c:c0:21:7d:95:f8:e7:fe:1d:94:
         d0:1c:eb:e3:74:77:f0:b9:09:28:8e:b4:b7:49:fb:79:10:8e:
         4f:85:ac:83:f8:6b:67:e8:ad:47:84:a6:41:96:a8:a6:ae:a2:
         16:49:30:32:67:97:76:32:f0:36:48:ed:49:60:26:c1:31:48:
         d7:31:e1:8f:9e:10:c5:9d:df:c8:b8:05:8f:7d:bd:a1:91:c3:
         af:bb:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org