Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
File:                     7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa (raw, json)
Hash identifier:          l2/VleRvhyLf28H6g8RWdbFPfelPJn+alR/X87rL+t8=
Subject key identifier:   60:53:11:C3:41:1A:31:4D:BC:EB:00:29:C0:A9:B8:B7:20:08:85:D1
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F432858455E5DA1C0BF4E6F553FAE9A00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     137443
IP address blocks:        192.185.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a1:c0:bf:4e:6f:55:3f:ae:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=3e076dc7-6bde-4805-94ff-4da43f802ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:98:8f:9f:25:5d:91:2f:14:b2:92:9f:96:
                    f9:76:f3:da:d4:5c:cc:5c:3b:4f:82:eb:26:88:97:
                    4b:9f:b1:d3:c9:8c:ca:1e:2a:9f:ae:1b:a4:6c:4a:
                    b9:ae:e2:a9:d3:3c:4a:a8:59:05:27:11:98:16:4a:
                    9a:70:54:3f:a9:6c:1f:b0:04:23:19:4c:87:23:87:
                    b9:ac:90:06:25:d7:1d:02:f3:4e:17:48:f0:d6:e9:
                    ee:26:8e:ca:67:1b:68:0c:21:56:64:31:51:ff:b1:
                    c5:12:91:02:6d:c5:b6:7a:af:f5:b3:8b:29:83:19:
                    8b:8b:43:6a:16:cf:e1:4e:2f:ae:d1:c5:65:3f:6f:
                    0f:3b:08:67:03:36:34:b8:e6:db:dd:32:c9:20:aa:
                    66:d8:1f:38:73:78:bd:82:6e:dd:31:f9:da:fd:b5:
                    fe:ca:4e:45:3f:7d:cf:80:ee:c3:4a:60:69:69:53:
                    b9:86:f9:ac:1c:8b:f8:85:89:a1:cd:4d:b2:d6:29:
                    8d:60:d2:04:77:c5:54:5c:db:bc:24:e0:99:a8:d8:
                    da:14:ce:3c:cf:f9:8a:8e:33:70:d1:05:ef:a0:a1:
                    18:e9:c8:38:7e:15:65:d2:9f:e4:f4:64:3f:6a:3f:
                    85:b8:85:c2:62:1e:16:a2:2e:b7:bd:9d:f3:f7:cc:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:11:C3:41:1A:31:4D:BC:EB:00:29:C0:A9:B8:B7:20:08:85:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:ed:d0:b2:95:89:d3:6c:48:bb:fa:0e:2c:52:ea:da:22:
         bc:95:e8:82:4a:c2:f8:e6:b8:35:89:c3:38:e1:7d:37:87:2c:
         45:fc:1a:40:d1:f1:18:d3:10:60:18:82:63:90:98:00:b2:25:
         4c:5f:df:ee:fd:96:43:32:90:da:7d:e9:e9:31:3d:94:18:32:
         cf:54:89:4a:69:d0:71:4b:6d:d3:59:dc:61:31:ae:67:a8:c1:
         20:ec:a5:be:4b:33:97:9b:84:80:bd:6c:ff:80:3d:71:3d:44:
         74:39:d2:fb:25:cd:aa:b4:66:1e:a6:f4:e9:a8:49:9d:21:92:
         0c:1c:07:23:32:c2:d9:f0:30:4a:30:6e:57:14:f1:03:2c:32:
         19:52:34:7a:dd:7b:7e:2d:65:62:d1:bf:43:4a:6e:da:6d:f0:
         bd:f6:59:b9:4c:9b:0e:80:6f:69:0b:56:cc:36:05:ef:09:66:
         14:8b:b1:65:2e:23:28:61:ac:15:49:c0:d0:c3:6f:38:1f:4a:
         55:39:17:2a:d2:60:97:16:a5:16:e5:ed:9c:6f:c6:51:f7:75:
         95:ce:00:b1:85:f0:70:a0:49:93:3d:be:b3:33:8c:5f:23:9c:
         74:3f:1a:db:9e:34:a0:3d:57:39:b5:08:e5:44:3d:38:49:ab:
         f8:b2:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:17 2024 by rpki-client on console-fra.rpki-client.org