Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa
File:                     affc3e70-595a-3177-bd29-0b81043aade7.roa (raw, json)
Hash identifier:          t0wV1vTc+ueVprvHsNkjqfl5MAhaILohJQDgxzaUlw0=
Subject key identifier:   9F:C3:C4:86:80:47:D5:7B:83:6B:AE:6F:1A:9E:2B:AF:C4:87:EF:46
Certificate issuer:       /CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
Certificate serial:       010D0C9F432858454272C5DB29ACD8B05FE9C340
Authority key identifier: 0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     400659
IP address blocks:        207.174.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c5:db:29:ac:d8:b0:5f:e9:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=205203d4-558c-4def-87de-3171ba28b3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:35:ac:0a:12:fd:18:e2:59:5c:6e:d6:f5:
                    2f:41:bd:a6:48:0b:60:08:0e:da:93:44:4f:f2:42:
                    74:d1:5c:1d:7c:62:a0:87:67:1f:2e:36:6b:f3:cf:
                    2c:4c:07:bf:c1:bc:04:8d:19:1c:1d:bc:e8:c7:1d:
                    04:e7:ff:9f:3d:96:a9:1d:3a:ba:4d:4b:83:6c:51:
                    3a:9d:37:17:fa:66:b3:aa:94:e7:10:db:f6:81:db:
                    4d:ac:e0:18:a4:8e:36:f4:52:ee:7e:a7:4c:1b:cb:
                    15:c5:ec:31:73:dc:a3:e6:8a:d1:84:e3:63:c8:2d:
                    f7:22:1d:19:60:90:59:15:f5:c9:15:ee:a3:51:c2:
                    b1:fa:41:85:54:b1:1f:8f:c6:3c:bb:16:f7:ec:8a:
                    19:40:28:a8:7e:68:14:2e:63:6a:f1:95:ba:e1:b4:
                    c3:18:68:a2:2e:da:32:53:f0:a7:c0:9b:fb:97:42:
                    03:57:da:28:2f:b2:b0:a7:ae:76:2d:60:45:e3:fe:
                    c5:53:ab:3d:8d:c3:4b:ab:e5:fd:36:1f:d5:3e:88:
                    d8:67:cc:3b:dc:e3:a1:0b:4c:59:21:34:03:b3:0e:
                    01:b2:62:36:44:75:9d:71:6e:34:98:60:b2:3d:3f:
                    05:dc:86:97:46:ff:fb:22:34:25:aa:10:7c:4d:45:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:C4:86:80:47:D5:7B:83:6B:AE:6F:1A:9E:2B:AF:C4:87:EF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl

            X509v3 Authority Key Identifier:
                keyid:0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:01:7e:3d:b9:53:29:09:14:e5:c7:34:d3:2b:c5:22:88:
         21:11:4a:22:2b:fc:9d:58:72:d9:0f:a8:cc:e5:cf:4e:90:15:
         6c:72:af:dc:49:a4:d8:f8:2a:8d:14:c0:0c:c3:db:4d:c5:7a:
         b6:a3:0b:3a:2c:08:cc:9c:b5:d8:d0:f6:93:d8:b6:72:f5:c8:
         85:ff:5d:3a:1d:44:df:3b:e8:db:95:db:df:49:45:a5:23:a3:
         4f:79:b1:14:75:0b:e8:47:97:67:27:69:26:63:60:ab:78:ce:
         19:8d:60:36:d1:0d:7f:20:98:4a:01:9e:67:ae:ee:fc:58:5a:
         bc:47:89:db:e8:a5:c9:39:4a:56:3f:e9:6e:db:87:aa:30:c2:
         ff:d2:ad:4c:90:17:c3:0b:2a:a4:b8:6e:e9:a3:cc:16:8e:ef:
         27:fa:b4:2b:89:df:97:21:f7:d2:06:48:1a:8e:bd:27:c3:5b:
         77:41:22:f4:37:33:1d:2d:77:f7:56:68:8e:e8:12:bc:26:cc:
         7b:7e:ea:42:56:ce:7a:b8:73:f5:98:62:0a:98:34:9b:88:85:
         27:97:d6:e6:63:d9:4e:ef:8f:d2:a3:9e:fc:0d:7c:83:6e:0f:
         bd:d5:b6:a7:28:0a:27:55:a9:40:36:0d:df:74:d0:ec:cf:d5:
         af:21:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:20:49 2024 by rpki-client on console-ams.rpki-client.org