Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa
File:                     858dd476-52d3-3d06-87f5-46c030ed18b9.roa (raw, json)
Hash identifier:          eR/O9AHgJ1dl0yuC8kfkn9BSu1qIpDAiVeMUBoEVh/w=
Subject key identifier:   1A:AC:A4:09:02:22:F7:7B:E4:7E:DF:11:8E:36:0A:47:EC:7A:CA:6C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462509C5B29536E7B987AD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa
Signing time:             Wed 20 Mar 2024 20:47:17 +0000
ROA not before:           Wed 20 Mar 2024 20:47:17 +0000
ROA not after:            Tue 18 Jun 2024 20:47:17 +0000
asID:                     15169
IP address blocks:        192.178.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:09:c5:b2:95:36:e7:b9:87:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:47:17 2024 GMT
            Not After : Jun 18 20:47:17 2024 GMT
        Subject: CN=e7634a0c-fced-4e6f-a6df-64c796dbed0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:aa:ee:3f:50:80:cc:d6:70:35:d6:23:81:
                    2c:93:1e:bc:65:e2:6e:2e:18:45:bb:6f:e1:5a:f8:
                    7b:63:a2:5e:3a:e7:ad:55:93:c4:9e:54:5f:db:62:
                    7f:e3:cf:2a:af:57:6e:98:21:6c:92:81:17:30:ce:
                    c8:99:26:90:43:e6:2f:fb:37:e9:83:fa:de:e2:7d:
                    a7:55:f5:e8:51:8d:e6:2f:37:10:3a:8a:f9:74:b2:
                    12:c2:62:dd:8e:54:71:01:45:07:cb:69:06:bb:cd:
                    ec:8b:44:87:48:fc:99:c9:65:60:a1:fe:7c:dc:cc:
                    96:f1:64:2e:69:da:ee:48:48:72:7f:44:db:3a:f6:
                    66:0d:64:0e:d6:87:2c:1b:fb:e0:b2:92:92:ed:69:
                    44:06:bb:cd:bf:13:fa:03:76:30:96:10:a9:4c:d7:
                    9f:f6:c6:d4:41:65:ee:10:95:c6:bb:44:0d:71:40:
                    43:a9:db:ca:e3:80:08:5d:11:d8:38:dc:4e:63:82:
                    2e:cb:81:3e:2d:ca:fd:c7:3a:12:bc:01:33:3d:2f:
                    ed:3b:0f:94:4a:8b:05:f5:ed:d3:fe:43:8b:c3:3a:
                    d2:55:c1:f3:18:6d:2e:08:ae:e4:c5:8c:46:7f:aa:
                    ff:58:75:73:df:61:63:d9:8e:5d:87:c6:95:5c:e3:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:A4:09:02:22:F7:7B:E4:7E:DF:11:8E:36:0A:47:EC:7A:CA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:b3:4a:a4:ed:dd:93:37:cc:aa:37:4c:da:57:9c:97:31:
         8a:7f:d5:01:4b:50:ce:4b:50:37:0a:be:14:4c:36:d5:7e:73:
         9e:79:2f:18:aa:dd:e4:c6:21:fb:c9:dd:a3:8b:44:7c:c7:a3:
         5d:b7:be:61:5d:07:5d:91:bf:f4:db:4b:09:74:2c:ed:ae:5c:
         20:5d:0a:1e:96:ff:94:6b:a8:75:ba:de:2b:84:7b:bd:1d:08:
         d7:3b:3f:72:3b:48:81:09:67:8f:b2:22:24:14:d0:3f:25:f8:
         a3:70:1f:9d:02:31:b6:ba:1b:e3:69:57:fd:e8:78:5a:37:94:
         04:62:8a:fa:0b:07:2c:b3:f6:7b:7b:c4:b4:9c:4c:5b:42:df:
         59:0b:4b:8f:21:b7:c3:14:2b:3f:6c:e9:f1:00:f0:ad:bf:31:
         02:2f:45:9e:f4:5a:1c:31:10:72:a4:3b:38:a2:05:36:04:83:
         2c:f4:bb:3b:c3:dd:c2:52:99:65:6b:7a:e1:75:5b:13:85:d4:
         ad:4a:2d:2f:2f:b0:ec:96:7f:a1:8a:d5:94:43:d6:a8:8b:d3:
         28:3c:4e:12:48:d3:aa:a9:a1:4f:ec:fe:1a:d9:24:6c:ee:11:
         ad:48:34:75:db:b4:2b:0c:fe:df:0c:5d:8f:2e:58:27:a1:76:
         33:c8:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:41 2024 by rpki-client on console-fra.rpki-client.org