Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa
File:                     6610a540-be97-3ab0-a99d-2e917411ed39.roa (raw, json)
Hash identifier:          MLbPpWEaeY6qbo/GYLiMCSbtgqRcX1Fyost7xAuMz7g=
Subject key identifier:   29:36:3B:EA:62:89:E2:FE:FF:50:25:C8:18:43:76:3E:D4:0B:BD:39
Certificate issuer:       /CN=1bdc33c8-ee14-4bda-ad4b-1789049b3217
Certificate serial:       010D0C9F43285845C5A8F153E6D200F8CD4EE0C0
Authority key identifier: 1F:AC:A9:52:3A:45:24:C6:FB:9E:9D:BA:3A:70:BC:F8:E7:C0:18:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     933
IP address blocks:        173.195.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f1:53:e6:d2:00:f8:cd:4e:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdc33c8-ee14-4bda-ad4b-1789049b3217
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=1eeeacd5-0dea-43c6-81ef-61e9912a62ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:e8:53:88:8a:4f:d3:c1:38:df:9e:94:12:
                    8e:a2:42:2b:37:3b:5c:42:46:a5:e1:e2:51:9e:17:
                    b7:80:b0:6b:5c:76:02:a1:d4:9f:78:83:28:d6:5a:
                    14:c5:b2:5d:4d:d5:1e:90:ff:ef:4c:c6:c0:ec:e4:
                    41:15:22:08:25:9c:5a:c2:5c:ca:a3:fe:cb:22:f6:
                    3d:08:8d:d9:fa:69:ca:8d:83:d0:1c:79:37:29:fe:
                    c5:d7:3b:84:25:d0:ba:e1:ed:b1:4e:23:ba:80:8b:
                    dd:5e:25:fb:ce:d9:c9:20:3a:42:b9:bc:fb:c7:a1:
                    1d:6f:31:16:db:0c:d9:bf:49:7a:2b:2a:d6:d1:9e:
                    c0:18:f3:b5:2c:1b:f0:c5:90:ab:4d:c3:08:61:c9:
                    7d:03:74:7f:cc:c8:ca:74:28:28:db:2e:58:07:6b:
                    d8:95:dc:d6:4d:ce:26:27:ee:0d:e1:7d:96:f0:05:
                    32:63:46:35:ae:6b:16:e1:95:41:47:da:3a:f2:42:
                    55:22:9d:ff:d9:cf:c7:5f:ad:06:36:c6:9c:bc:4b:
                    84:c4:ed:77:85:72:b7:c1:52:63:87:0a:09:47:4a:
                    56:5b:d3:34:70:77:ec:2e:c4:fc:76:9b:fd:e4:73:
                    4d:ce:34:c0:d9:48:a5:a7:26:19:15:83:e3:2b:e9:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:3B:EA:62:89:E2:FE:FF:50:25:C8:18:43:76:3E:D4:0B:BD:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.crl

            X509v3 Authority Key Identifier:
                keyid:1F:AC:A9:52:3A:45:24:C6:FB:9E:9D:BA:3A:70:BC:F8:E7:C0:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:32:29:89:57:ce:74:36:b0:cb:b6:90:cc:ff:ca:32:08:
         1d:af:90:e8:86:ad:47:93:b3:4f:1f:74:5e:ec:8c:42:36:26:
         42:a1:fe:dc:27:c5:79:fe:4f:1b:44:b0:b9:cb:23:16:77:7c:
         e1:82:50:5f:ee:d8:36:a9:b9:5c:8e:68:7b:18:2c:11:70:83:
         e3:31:fb:54:a5:d8:fe:6c:cc:9f:81:41:ef:04:23:aa:f5:46:
         32:83:8e:11:1d:34:46:05:32:17:e2:3c:32:82:4e:d0:c7:34:
         1f:93:22:09:32:63:f4:8c:c8:ba:ee:69:64:4d:93:1f:32:b6:
         bb:55:5b:6c:df:c1:35:fa:08:c4:18:f1:01:ad:cf:9c:78:4d:
         6d:03:50:c8:1f:31:3f:12:54:98:6b:a2:81:de:00:f8:b9:29:
         b7:11:26:27:7a:69:14:92:de:36:5d:99:fd:b0:88:97:e3:47:
         3a:00:e8:95:a3:3e:0a:5c:d7:70:39:06:5e:1f:01:24:fd:a2:
         45:6c:a3:8f:b0:24:c2:19:12:fd:13:f9:47:58:ef:63:25:e7:
         4e:eb:3b:d2:11:57:e5:5a:b1:f5:67:6e:f5:17:53:be:0f:af:
         8b:9f:a1:07:3b:60:6f:3d:c9:ea:c4:33:ac:c0:db:8f:66:f5:
         61:4f:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:22:22 2024 by rpki-client on console-ams.rpki-client.org