Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa
File:                     fb1ec478-9e0c-324d-9230-e38ddaa87431.roa (raw, json)
Hash identifier:          7N3HluU/8pbjrPS9gHoDbko1tw9Gns6gclHu34CGWiE=
Subject key identifier:   13:D6:A0:53:E0:FE:50:27:E3:D5:72:F9:2F:78:C8:37:93:86:90:51
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F432858454272C2E18578E4035A27D6C0
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     400541
IP address blocks:        147.185.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c2:e1:85:78:e4:03:5a:27:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=c487cf55-d64c-4c5c-a2b3-b9e8d62ec40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:c2:f5:6a:4c:0a:0b:f7:52:04:ea:cb:1f:
                    8c:d8:9b:74:be:c6:97:46:f5:a5:52:df:3a:f3:21:
                    da:f9:fc:14:8d:ba:e1:55:d0:78:00:fc:57:4f:46:
                    4c:e5:8a:b9:91:fc:d4:62:20:a4:85:93:e7:09:a9:
                    23:6f:c6:86:21:98:f2:40:65:30:2c:82:c2:91:25:
                    5b:27:d1:79:cd:25:de:3c:7b:02:3f:00:30:43:78:
                    a5:2b:eb:6d:ce:b2:34:b0:83:c4:43:9e:d9:62:dd:
                    18:93:fb:98:2f:2f:b0:95:bb:62:39:34:99:7b:6b:
                    97:dc:a3:1f:bb:a0:1d:7c:3d:63:35:de:0e:fa:d6:
                    7a:26:34:85:26:f7:0e:93:8e:fc:ab:d0:e1:e0:83:
                    bd:49:d6:db:60:fe:28:56:6d:97:b3:8b:73:f6:68:
                    62:5e:54:48:b6:42:aa:85:57:c6:18:ec:ad:86:f2:
                    e6:a2:3a:e5:6b:af:1d:48:73:9a:1c:b9:77:9a:f0:
                    cf:81:89:da:d3:4c:fe:d9:22:53:05:7c:77:c0:7b:
                    0d:10:fd:51:4d:47:b5:2a:59:35:05:0e:58:23:aa:
                    7d:9f:29:02:25:6f:b0:03:b2:4e:0a:1f:3d:b3:e2:
                    d0:21:75:91:a6:89:ad:06:b9:92:55:6a:80:a1:72:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:A0:53:E0:FE:50:27:E3:D5:72:F9:2F:78:C8:37:93:86:90:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:94:d6:fd:f8:b3:ce:f3:b5:73:f2:73:7f:e6:3b:0d:58:73:
         4c:97:3b:10:64:f0:33:60:73:77:13:04:1f:c8:6b:83:e6:07:
         f5:d9:37:56:0c:c8:ff:6e:a9:39:2d:78:e1:b2:38:66:4b:c2:
         4f:6d:bf:b5:4c:4f:95:57:21:d4:81:36:a9:8a:83:1d:25:05:
         a9:58:3f:fc:7b:88:35:8e:48:fb:01:ca:39:73:67:3a:84:32:
         37:dc:bf:00:14:1e:e7:00:72:81:54:dc:63:ab:6a:b8:7d:8b:
         e0:fe:d4:bb:3f:52:15:1e:df:c2:99:b2:91:95:32:e4:89:ec:
         2e:04:3e:ff:17:6f:a4:ac:57:46:e0:c2:49:dd:60:b0:76:a5:
         f9:5f:6b:1c:8e:a3:46:b7:fe:04:38:f1:12:55:e1:3a:67:d6:
         5f:11:31:56:9c:3d:97:00:e7:c5:a3:7a:31:39:e1:b8:1a:94:
         a3:c0:6b:02:65:90:99:2d:31:d7:32:ee:d3:a7:f3:86:13:37:
         89:fb:ae:a0:9a:80:f4:27:10:a6:4b:0a:59:ae:77:02:ce:52:
         98:9f:11:da:78:db:b3:74:5f:e4:16:17:ec:a2:78:be:77:0f:
         ae:29:07:83:01:4f:60:4b:b5:52:ca:0d:0a:39:9d:1c:77:10:
         c9:96:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:28 2024 by rpki-client on console-ams.rpki-client.org