Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
File:                     dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa (raw, json)
Hash identifier:          9UsxcLpkiDSmOCYYRR4aTa/qTX78TYB9Um5wjpawar4=
Subject key identifier:   64:E1:17:A1:73:2F:D6:94:E4:21:EB:EB:8B:64:67:54:A3:EF:07:01
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584507F0241DD2687D42EABF9FC0
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     395915
IP address blocks:        207.2.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:24:1d:d2:68:7d:42:ea:bf:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=0e610d93-ed56-44bd-933c-4e55fa072108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:0d:c3:8e:d7:6a:69:15:e5:18:4a:f2:5e:
                    f7:43:0a:8e:4d:2d:e6:b4:a1:61:7b:5b:fd:ee:c0:
                    8b:ec:f5:24:75:ca:88:34:76:29:5a:5b:b1:e9:b9:
                    97:72:8d:59:84:2f:a6:45:e0:05:68:5f:c9:b9:f0:
                    d9:ec:f7:6d:69:fa:49:d0:2f:e3:88:a2:72:62:7a:
                    df:60:06:e8:62:01:60:bd:74:42:20:da:f9:38:e0:
                    39:9f:98:07:2e:fd:bd:22:74:42:c5:e4:1c:0d:53:
                    99:8a:a2:03:7f:2a:59:ef:95:59:f7:29:16:79:8b:
                    82:ed:a1:8e:d2:1d:75:6c:4d:b9:81:7b:22:93:2f:
                    b7:d0:29:5c:9d:97:fd:ff:93:d4:1d:12:41:4b:47:
                    ee:79:49:5a:a4:26:eb:10:39:e2:bb:53:17:4c:61:
                    21:c4:ee:e1:71:a1:6a:87:f3:f3:d7:44:d2:db:73:
                    a8:62:c7:5f:11:35:95:20:6c:64:94:7c:41:c1:81:
                    93:79:1c:af:58:aa:bf:01:29:28:4a:c6:26:60:5d:
                    f3:90:b8:aa:14:06:47:9e:70:db:53:d8:ec:d0:93:
                    f8:3b:6b:08:c3:a7:a2:f9:17:b2:2c:24:20:fd:a0:
                    52:f7:87:ff:4f:3d:38:64:8a:ef:72:e3:68:db:ed:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:17:A1:73:2F:D6:94:E4:21:EB:EB:8B:64:67:54:A3:EF:07:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:30:00:e3:55:56:1c:8d:87:ff:ce:88:df:dc:d9:f9:1e:72:
         b1:d3:6f:b5:1e:a0:c6:4f:50:7e:26:7e:18:96:fa:bc:3b:e3:
         75:ec:46:d3:65:45:8f:fd:83:4b:55:2d:c4:b5:b3:30:99:6c:
         84:19:20:df:72:76:1c:ae:e7:58:c2:f2:70:97:64:79:fb:8c:
         9a:25:f5:7b:d3:35:d2:e4:94:dd:f7:55:cd:d8:de:fd:1b:7e:
         bf:fa:6d:89:66:72:88:9c:85:a1:57:9e:3b:bb:1f:2d:0c:c9:
         53:b8:50:3e:0b:80:4b:94:9b:26:45:26:7c:5f:15:af:9b:50:
         5c:d3:e0:27:36:62:e5:4b:58:29:38:57:f6:20:ae:47:2e:47:
         c7:b4:60:e2:98:04:98:ef:39:9a:75:97:dd:c8:40:9a:7c:09:
         06:ef:53:ef:d2:c3:7e:02:23:00:97:40:8c:76:b7:a4:35:08:
         db:8d:d0:98:02:2c:cc:88:f7:d9:91:8a:8d:31:4d:ea:92:4d:
         56:b5:d9:f3:43:b5:57:38:4b:99:a1:ea:e2:5f:bd:25:c4:bf:
         21:83:22:6d:85:9e:80:fb:a7:68:15:d2:38:ce:00:a9:be:d4:
         10:9b:3f:98:05:0f:af:39:29:20:ad:93:4a:6a:c1:d0:2b:2b:
         a6:9a:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:50:44 2024 by rpki-client on console-fra.rpki-client.org