Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa
File:                     0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa (raw, json)
Hash identifier:          7qU5oNIp44o0RueLpNMjd0G0EQqe7zMMi+W5L/OPzKw=
Subject key identifier:   DA:29:07:B2:58:5E:40:6B:ED:F4:27:85:DF:B9:94:E5:A8:8F:D9:21
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584538AD47B223C2F4ABAD47E740
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     396253
IP address blocks:        138.43.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:47:b2:23:c2:f4:ab:ad:47:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=4073abf9-a6b3-4c5e-a5f9-831567f111b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:83:e2:dc:05:c4:80:f4:28:2e:7a:e8:84:
                    55:51:33:12:56:0a:9c:bc:26:3e:33:dd:d3:8c:0b:
                    69:f5:97:ee:86:1f:35:08:c2:d4:c0:0d:6e:42:7e:
                    69:d3:19:b8:97:b5:7f:de:0d:d9:9d:2a:b4:8d:32:
                    cd:08:01:b1:68:46:9e:86:2e:96:e3:c4:ac:80:e1:
                    17:25:51:40:aa:e4:ca:f5:51:e9:95:9f:57:5c:5d:
                    86:26:ed:11:e7:6b:80:fd:4c:a6:d2:96:11:e0:06:
                    b6:e0:e3:37:82:70:6a:7b:82:c8:b3:ea:24:8a:d3:
                    36:a4:98:b3:36:17:98:36:84:03:56:ed:fb:ab:6a:
                    23:1c:69:eb:9f:e9:3f:f3:81:3a:c3:eb:ca:a6:f8:
                    ca:d0:96:eb:8a:d8:77:23:5b:c3:d8:67:ec:76:76:
                    e0:a0:b4:b6:b8:c2:a0:38:2e:61:0a:b0:de:71:58:
                    71:9f:bc:9c:13:4e:6f:63:9f:28:d4:b4:7b:33:0a:
                    43:7e:8a:48:9f:59:d1:1b:56:f8:a6:5f:e1:80:94:
                    27:31:7f:55:85:b8:52:5f:eb:b6:75:67:c0:8b:6d:
                    c6:e9:6a:f3:7b:2f:96:a0:fb:22:6c:b5:a4:af:14:
                    a5:99:f8:42:36:20:27:db:e6:56:7e:1a:07:b6:6b:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:29:07:B2:58:5E:40:6B:ED:F4:27:85:DF:B9:94:E5:A8:8F:D9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:6f:81:c6:c9:69:fa:04:81:62:c3:3e:81:5f:28:ba:19:
         1e:5e:23:00:43:17:6f:91:07:a5:cd:a8:4a:51:d6:f2:f2:28:
         7b:08:9e:fc:3c:5f:fa:61:36:6a:60:31:54:55:ec:03:7c:7b:
         e7:12:55:50:2d:9a:3a:9e:78:a9:fe:0e:49:62:30:0e:ac:0f:
         6c:31:aa:08:62:c4:d1:76:0e:67:bb:9e:e1:6b:ab:b4:1a:11:
         28:85:65:a3:e7:51:bd:e2:e1:74:74:2d:eb:3d:bf:eb:75:f4:
         9f:d6:fc:3a:d4:b5:0b:46:1c:ff:02:45:26:f6:19:5f:b2:dd:
         ce:22:24:75:60:cb:32:f9:ca:63:ba:b0:16:8a:32:88:22:82:
         ac:2b:6c:10:a2:33:21:2e:81:df:3c:c4:39:c6:5a:f4:22:65:
         0f:e9:eb:11:1d:60:f7:57:0b:02:17:bb:ab:ab:aa:bc:48:00:
         25:f0:98:b7:25:70:19:ae:79:a5:8c:fa:5e:f7:08:c5:51:e8:
         a4:6f:13:4e:c9:a7:51:38:9a:d8:18:1d:2c:a6:93:29:74:91:
         e3:f4:88:8d:db:84:3b:3e:6e:86:33:c3:a7:8c:9f:ed:bb:ae:
         67:26:3f:e6:c5:c8:76:42:02:9b:04:bb:e0:b2:35:00:50:00:
         3c:e2:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:46:50 2024 by rpki-client on console-fra.rpki-client.org