Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
File:                     207c5881-e7f3-366b-a899-246463e7043e.roa (raw, json)
Hash identifier:          2uHQzKnO3Boxskv7BH3+Z+n2/Fm6+1pNa5qGGaKkoro=
Subject key identifier:   D5:2D:14:0D:4C:16:B3:B1:21:E3:57:22:E0:5C:D9:9F:72:67:9E:D3
Certificate issuer:       /CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Certificate serial:       010D0C9F4328584523DAFC530B4B70CD7C804900
Authority key identifier: 83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     22644
IP address blocks:        147.140.0.0/16 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fc:53:0b:4b:70:cd:7c:80:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=c290f03d-fdc5-4975-bb91-a5ed5fab8393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:30:0d:f4:42:d7:97:74:cf:bb:b4:15:81:
                    6e:92:62:77:94:a4:c8:c4:4b:36:52:2a:62:f2:33:
                    26:0a:67:d6:fe:30:2c:7f:a0:9c:a1:e4:4b:e2:b8:
                    e1:4d:88:67:34:18:8c:ff:9b:67:74:a7:be:4e:5b:
                    ac:a5:8c:b1:b7:39:7d:8a:d7:5c:02:c4:d2:19:46:
                    73:b8:f0:b5:35:06:b7:0d:38:5e:30:85:19:f5:c1:
                    1b:1f:f1:79:4c:7e:5a:38:8a:dc:e9:19:a0:de:61:
                    93:ba:67:ec:c4:e5:2c:05:48:20:77:83:6c:7c:f8:
                    75:79:ec:f9:3d:df:b7:63:18:25:1f:f0:54:f2:0a:
                    b1:bf:96:0a:c0:13:a9:4f:36:42:67:49:b9:7c:f9:
                    c0:d2:f1:09:be:a2:44:ae:4b:d4:9e:e7:43:09:57:
                    0d:04:20:ed:ce:eb:ac:92:a1:bc:c8:1a:75:28:e4:
                    c0:3d:7d:9d:03:52:70:32:4f:7d:4c:39:66:59:1b:
                    90:ce:02:32:96:ec:59:4f:67:ee:6d:52:8d:c1:50:
                    6c:2b:19:a1:f7:89:21:f4:b4:9c:a8:e1:60:85:ae:
                    c2:a5:9c:9f:e9:7d:5a:4b:14:1f:64:ed:df:86:14:
                    9d:47:b9:3e:63:ee:c7:38:d5:ba:de:5c:37:39:cc:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2D:14:0D:4C:16:B3:B1:21:E3:57:22:E0:5C:D9:9F:72:67:9E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl

            X509v3 Authority Key Identifier:
                keyid:83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:1a:2f:84:3d:d1:20:25:b2:af:e4:48:2b:39:bf:7f:43:
         ec:4b:10:05:06:02:6a:a0:6a:f0:d5:e8:38:6d:44:30:20:a1:
         80:98:84:ae:49:3c:f2:98:77:64:df:8c:ab:43:c5:9c:0b:96:
         e5:8f:b0:9f:1d:9c:98:15:55:87:73:71:d6:b0:05:00:f8:fd:
         c6:30:a8:1a:05:d5:7c:b3:bb:5b:fe:69:64:83:f8:5d:9f:50:
         b1:84:b9:a4:26:27:72:64:b7:e4:d2:98:da:f5:77:58:b4:76:
         ce:5d:06:bf:d5:b7:a1:c7:e0:02:46:38:53:c0:69:1a:b2:d0:
         21:93:de:b9:42:b2:ec:d3:57:51:98:61:3b:8a:ff:de:c4:68:
         9d:7b:47:e5:8e:18:f5:4f:6b:55:8b:e4:cc:32:af:41:54:8f:
         7b:24:0e:a3:c6:30:df:dc:73:56:b9:4a:a0:8e:04:c5:74:e0:
         dc:5d:fc:f4:6a:06:43:d2:f1:51:dc:5a:d2:41:1e:b0:5d:fb:
         87:9e:19:b9:4d:2b:c5:d9:6e:13:fe:7a:1d:39:5d:64:fb:6d:
         f3:60:1d:72:1c:cd:2a:97:9a:9a:bc:51:e2:c3:72:8d:e7:6f:
         cb:9d:f1:68:ab:38:f0:69:35:05:a4:62:ac:50:c4:65:f9:c0:
         7e:b4:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org