Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa
File:                     deafc427-5a9d-3398-8cb1-90e4db65d46f.roa (raw, json)
Hash identifier:          UXeS8CIz8hYCPxEmkOYd4dWGLlBVm8wK0pE1/1g+RTo=
Subject key identifier:   C9:C8:36:FA:D6:64:68:CC:05:1B:CE:95:46:C5:43:0A:49:6A:75:17
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285845D39E5F5C6684E26F5B106300
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     54203
IP address blocks:        64.145.90.0/23 maxlen: 23
                          173.245.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:5f:5c:66:84:e2:6f:5b:10:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=25f4242b-6b10-4882-b6d2-ff778ffd5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:88:3f:ec:3d:b2:53:99:05:58:7e:de:b0:
                    95:70:87:28:a8:0d:fb:e7:96:d2:06:f8:c8:2b:4d:
                    c3:d8:80:22:f6:d3:92:8d:3d:2d:f4:c2:66:8f:4c:
                    d0:ea:f2:25:30:b8:f0:68:47:de:6a:82:12:4f:a2:
                    eb:66:a5:3c:39:99:df:99:d0:7b:cc:5f:fe:9b:53:
                    86:f7:77:99:c6:bc:00:9e:41:5a:0d:57:98:07:43:
                    6f:55:d6:ec:18:77:e9:87:2d:f7:6f:03:03:4d:4a:
                    0e:e2:f0:ae:fe:05:50:9f:58:c2:c0:6e:6f:0d:8c:
                    6d:d2:0b:4a:35:4a:d9:46:74:39:bf:ba:f0:58:1c:
                    bd:25:fc:73:a5:d6:0a:d7:4f:9b:98:98:29:48:d8:
                    1f:cd:2e:7f:de:c6:dd:00:79:d5:09:03:42:37:98:
                    c8:59:4e:e8:97:51:29:6a:63:12:24:60:98:bf:dd:
                    18:f7:f4:2a:90:63:7c:a9:61:8b:45:54:73:bd:3c:
                    7c:64:ef:74:fb:70:58:99:57:94:15:c9:e4:62:94:
                    3b:44:42:a1:ea:ff:d6:14:61:a8:38:55:2b:7b:9d:
                    b5:a3:71:f8:46:f9:32:e5:92:79:33:90:eb:17:9d:
                    a8:9d:ec:6f:22:a8:fa:0a:f8:d5:4e:e9:e0:70:6e:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C8:36:FA:D6:64:68:CC:05:1B:CE:95:46:C5:43:0A:49:6A:75:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.90.0/23
                  173.245.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:a4:a1:b4:55:79:8b:5a:8c:24:ec:7d:73:e2:2b:07:7b:
         cf:cd:a0:20:bf:49:9c:18:83:55:a9:e0:85:d1:e0:c0:ef:4b:
         7f:39:be:f8:9f:e4:0d:a5:ca:f2:6d:9e:d0:c4:ec:d1:2e:ec:
         07:2e:61:58:fa:f6:5d:0a:05:cf:b4:86:46:e5:bf:25:b3:96:
         21:0a:8f:4c:3e:e4:48:58:a6:3c:bb:37:c8:a8:24:53:ac:8d:
         44:88:b8:65:cb:84:ea:bf:bb:2e:d2:9f:7c:f8:82:ee:2e:50:
         03:38:bf:c2:ea:ea:c8:d3:c2:6c:14:c9:10:2a:ae:9f:80:e1:
         a4:16:e7:c1:6f:ff:44:eb:d0:12:ae:8e:36:fc:ae:b9:d5:d6:
         2f:a9:3e:77:01:cd:30:9d:65:b1:23:1e:bf:26:18:2f:09:fa:
         52:81:eb:42:74:15:5e:2e:93:f4:02:02:cd:77:2f:ba:f7:0e:
         00:83:27:cf:d1:e9:64:f3:21:9c:4d:63:44:5d:19:c7:70:5c:
         e0:02:84:83:fc:e4:29:47:71:1e:90:35:bb:58:84:30:56:46:
         bd:ae:f9:61:7d:bb:ac:61:74:39:74:c1:cf:66:01:a6:82:98:
         a6:1a:22:66:25:b5:ee:82:2a:f2:57:2c:78:1e:d2:49:be:b7:
         7f:7f:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:53:04 2024 by rpki-client on console-ams.rpki-client.org