Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
File:                     49e76bad-f289-35f2-be4e-1d132305579f.roa (raw, json)
Hash identifier:          ytrJ6OGjLCJ6taAWBsKDnzzSh71tAYVnOTvFfphGWrQ=
Subject key identifier:   60:D9:20:B5:3E:4C:6E:9F:11:37:F3:3A:8B:50:E6:65:D2:87:08:FF
Certificate issuer:       /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial:       010D0C9F43285844F73006CD3774F7B07280F080
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        199.43.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:06:cd:37:74:f7:b0:72:80:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=cf44177f-3fa1-4c95-bea1-b9d09375f441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:f1:2f:2c:df:80:62:8e:c8:30:d7:a8:4c:
                    84:55:5f:54:b7:c8:3b:af:12:46:d7:db:ec:9a:07:
                    ac:9a:e8:0e:43:c0:e6:d0:16:d4:92:b7:af:55:4d:
                    bd:39:f9:ff:d4:9d:63:37:dd:d6:83:42:2d:af:e9:
                    a4:ce:79:a6:4a:4a:32:74:e9:24:94:b7:39:4e:35:
                    55:1c:1e:74:cb:6b:73:ea:7c:85:20:57:11:a1:23:
                    b1:22:9c:3d:9c:a0:5e:b8:1c:64:da:a6:45:1c:1f:
                    23:02:3f:f3:39:89:6c:1f:63:9a:c2:09:92:cd:08:
                    bc:8b:22:e0:0f:9d:69:71:b5:d6:f3:07:a6:fb:de:
                    d3:d1:a9:eb:d3:53:b9:04:41:25:d5:fb:84:03:94:
                    2b:cb:31:d7:d8:6a:e2:7d:a7:36:45:eb:ee:f0:b7:
                    4b:f5:b8:b5:61:34:b3:0f:0a:9d:86:c6:b1:cf:3e:
                    18:fe:be:43:4b:e2:04:c6:6d:c8:9b:f3:ee:f0:33:
                    ac:cf:11:9a:14:a9:90:e8:5b:12:a9:99:e7:ba:26:
                    70:dd:88:c8:79:4c:e9:15:a0:b9:5a:12:21:db:e2:
                    89:58:1a:28:39:00:d8:12:7f:53:12:63:dd:82:dc:
                    23:1c:05:8d:56:07:9c:0c:50:3a:32:e6:1d:18:ce:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:20:B5:3E:4C:6E:9F:11:37:F3:3A:8B:50:E6:65:D2:87:08:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f6:14:07:17:dc:37:99:ef:e5:c8:d6:98:c7:6f:69:d8:4a:
         dc:2d:e9:00:a7:06:6e:c2:53:16:5f:24:ea:66:be:2b:47:29:
         6c:e9:28:62:05:57:0c:b1:0f:1b:21:33:cc:9b:1b:d0:51:40:
         42:68:85:bc:11:28:ea:10:c9:de:7d:5a:4b:cd:2e:70:d5:92:
         a6:d1:89:37:b7:0c:1f:33:01:43:ae:ae:2c:c8:b6:f6:31:34:
         57:a1:10:e2:64:be:68:69:37:a4:41:23:89:c4:0f:f5:2d:d3:
         05:43:47:b3:b5:71:20:f7:6e:3f:0c:84:d3:23:a7:03:be:77:
         5b:6b:e4:c6:d9:b1:06:da:3c:63:d9:22:44:d6:a7:9b:18:d1:
         9c:e2:63:5e:db:1a:cf:c1:d8:28:cf:27:0b:cd:5d:23:8f:26:
         cb:bc:64:23:54:8d:7e:a2:ac:24:b2:7c:28:b5:63:30:66:f4:
         18:5e:81:37:2b:48:bd:76:b1:b9:3a:ab:ef:b6:11:4c:78:d9:
         78:ef:b4:46:15:61:d8:bb:5b:22:21:02:9f:1e:0a:eb:a6:42:
         dd:41:ef:20:75:91:46:19:e5:1c:16:22:ae:f1:2c:4d:fa:ed:
         d6:7b:ac:eb:9b:0b:b6:aa:84:89:e0:2e:19:93:59:4c:9e:ae:
         ee:22:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:29:18 2024 by rpki-client on console-ams.rpki-client.org