Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa
File:                     dfd3d048-8bdd-310b-bb35-6af01226903d.roa (raw, json)
Hash identifier:          mhcQEGE4M2RJoeb9AyPjoDsl6jCU75akD74U1a/xXgk=
Subject key identifier:   25:31:A7:EC:23:E9:83:4F:D1:71:3E:C5:39:49:A2:49:A5:B1:46:8F
Certificate issuer:       /CN=4e393a43-f67b-4eae-87ba-065de2fc159d
Certificate serial:       010D0C9F43285845E193CCAB735DDA3A3ED7EB00
Authority key identifier: 15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     63399
IP address blocks:        207.189.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cc:ab:73:5d:da:3a:3e:d7:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e393a43-f67b-4eae-87ba-065de2fc159d
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=91bd4548-0d13-4862-b561-3e06c4e93baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:25:72:a6:df:37:36:44:c0:a4:37:dd:47:
                    69:be:cf:ed:d6:a0:0d:a3:b1:82:f6:92:50:1e:bb:
                    ad:1e:29:eb:e7:cb:f9:4d:06:be:3b:ad:1f:68:a9:
                    f7:0b:e3:ae:85:76:d0:32:49:a4:95:96:b7:b8:80:
                    94:6f:55:84:44:d8:f7:76:41:b7:ce:6b:74:a7:77:
                    4a:a9:15:93:45:4c:cc:b8:e2:ae:1c:26:01:28:c5:
                    16:77:5b:f5:92:42:e6:f8:a7:d6:81:2f:ab:42:4a:
                    5e:c5:75:14:a3:a7:a0:da:7c:67:79:dc:1c:50:08:
                    a9:3f:78:ec:0f:b3:57:7d:dd:3f:17:45:33:77:30:
                    91:c9:8b:11:ee:1b:45:69:02:72:98:85:bf:a1:64:
                    1e:3a:ea:01:ab:3d:40:5f:c0:01:af:57:64:42:24:
                    a9:d6:c6:6e:5e:4d:ff:4a:a5:69:20:01:1a:18:2b:
                    bc:99:7b:da:dc:8b:8f:10:ed:b5:bd:72:cf:ca:a8:
                    5f:26:65:48:79:5c:91:1b:79:6c:6a:cf:db:04:c9:
                    97:82:5f:8f:34:6b:95:bc:d5:42:ab:aa:db:01:a4:
                    a8:e7:23:75:1d:41:2f:57:46:47:f5:a4:13:2c:13:
                    1b:b7:f9:87:ba:47:12:e7:d6:27:3e:d5:c9:a8:db:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:A7:EC:23:E9:83:4F:D1:71:3E:C5:39:49:A2:49:A5:B1:46:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl

            X509v3 Authority Key Identifier:
                keyid:15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.189.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:c6:2d:6b:42:5d:7f:1d:0d:de:74:42:44:84:8c:0b:ca:
         c9:10:e5:99:35:7f:83:66:59:0b:ca:24:46:2c:fb:56:70:6c:
         5f:f9:20:9b:db:1d:42:02:8c:57:6d:ab:f1:77:3f:a8:08:fe:
         17:eb:0e:51:79:d2:aa:f4:4a:52:da:10:53:13:54:db:82:40:
         aa:6d:fc:b0:c4:a0:9b:80:8f:1d:ff:fa:97:88:40:c9:d6:ef:
         06:3f:94:ee:b3:4f:9b:78:a8:ee:fe:80:46:2f:4f:65:d1:f0:
         bc:2a:18:b0:07:0c:8b:b2:08:b8:ea:c8:e9:2d:9e:a6:ce:f4:
         fa:5e:d6:bf:f3:ca:2d:fc:07:e7:66:81:33:3e:ea:0c:38:7c:
         75:4b:15:66:bb:ed:94:13:cd:4b:ce:3f:e0:33:db:9e:c0:b2:
         26:ac:4b:83:95:4c:f4:ff:0d:bb:81:c4:6d:7f:df:15:8c:f1:
         06:62:45:54:ec:1b:c4:e8:84:b6:f5:85:3d:17:b7:1f:28:0f:
         2c:e4:94:2e:ee:56:b4:ee:b1:02:a4:40:94:d6:ed:4e:68:4f:
         89:f0:5d:58:8d:dd:a4:42:4d:cc:6a:a9:9f:44:97:d8:33:32:
         56:4a:5c:97:b2:1a:5c:cb:ff:09:d8:3f:72:8b:f6:1e:cf:aa:
         67:03:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:50 2024 by rpki-client on console-fra.rpki-client.org