Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
File:                     444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa (raw, json)
Hash identifier:          831lM0sLPgYJIKF5bIri4IGPgreg3Pkq1vZIRn4u3QI=
Subject key identifier:   F5:CE:60:91:E0:A5:E3:BA:4F:BE:DB:E1:F7:5C:72:34:02:EA:81:1E
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F43285845708309DC7D35A23A00BB2B80
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     32402
IP address blocks:        199.7.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:09:dc:7d:35:a2:3a:00:bb:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=20e0a7ec-7659-4b6d-816f-ebe8e6d0cc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:2c:53:48:94:f5:43:93:3d:6f:90:4e:75:
                    73:64:4c:64:a9:28:45:b2:c7:64:a0:8b:c6:c0:b3:
                    c6:61:9c:e4:01:8f:7c:a2:0a:b2:ef:48:73:60:55:
                    1c:18:dc:d0:50:67:43:f6:0b:a9:3e:8b:82:b9:28:
                    ce:9e:05:61:c8:36:49:19:4a:de:47:a7:46:c8:f3:
                    6d:f3:01:69:2b:43:47:9c:8e:01:fc:f7:a8:e0:c0:
                    56:32:69:8b:da:93:c1:f8:8d:e1:fb:9d:cc:c6:d6:
                    8e:7e:6a:90:91:c3:8f:7e:d4:68:6f:5f:3f:68:88:
                    5f:59:01:00:e1:a1:80:c8:d3:43:97:c4:bc:69:ae:
                    b8:54:8a:41:38:a1:98:df:6c:41:5e:4b:fc:fe:70:
                    d3:7c:7c:05:13:69:af:14:a3:9e:81:8b:b3:02:d7:
                    70:31:09:aa:41:4d:47:b9:10:53:b5:2b:35:3f:c3:
                    a2:ad:0d:a6:ac:2b:c4:f4:54:87:25:9c:3c:8f:57:
                    1c:4c:f1:4b:23:34:1d:6d:67:96:58:7a:7b:a2:ed:
                    11:fe:fe:c7:36:6d:45:c3:c9:07:5d:fd:c5:22:8b:
                    5e:6b:50:09:1c:19:aa:f8:cc:12:4b:d6:67:f0:ef:
                    53:08:5b:ae:f0:9d:37:e1:70:5e:6b:70:48:a0:a9:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:60:91:E0:A5:E3:BA:4F:BE:DB:E1:F7:5C:72:34:02:EA:81:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:70:af:9e:3d:38:3c:80:c6:fd:cf:6d:b8:fc:a2:00:3f:
         76:85:0c:9e:62:87:7c:49:85:28:d3:ae:95:49:9a:d3:ef:ae:
         ab:6c:7b:53:aa:3d:0e:aa:78:2b:fe:15:dd:73:2b:54:f8:a2:
         2e:62:a4:f3:71:6d:97:ff:61:39:81:24:13:1a:8b:a0:e0:a3:
         4b:6c:c9:1a:6f:39:ae:11:e3:c7:7e:f6:7a:b6:25:8c:78:0a:
         b9:42:3e:e1:59:11:7b:2e:13:0e:3e:76:e6:77:ce:5b:01:3c:
         f9:24:a3:1c:a4:e8:9b:12:a1:97:10:ab:a5:81:e2:05:14:5a:
         dd:92:fb:f5:76:17:04:4b:b0:7f:e7:da:95:43:bf:3b:7c:ad:
         79:4d:86:f1:22:ce:2e:5a:74:da:1c:85:23:4f:e4:8d:9a:4e:
         05:85:df:6d:32:3a:52:9a:db:c7:02:97:f8:4c:65:41:c3:5e:
         fd:4c:10:d5:74:9c:e8:d7:51:f7:4b:81:98:7e:0c:1f:fb:7a:
         7a:0d:67:11:f6:9c:c4:ea:56:0d:c4:1d:1f:02:86:b7:59:64:
         fe:63:f5:25:b7:88:a0:65:53:04:b0:72:4f:d4:61:f9:ed:d9:
         72:db:86:a3:e9:33:e1:bb:39:85:08:91:d0:70:bb:d0:d8:96:
         78:10:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:35 2024 by rpki-client on console-fra.rpki-client.org