Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/dc0902e4-7edd-3d46-8f4b-730bf1c57e5c.roa
File:                     dc0902e4-7edd-3d46-8f4b-730bf1c57e5c.roa (raw, json)
Hash identifier:          p+srNbV1sFKYLUTgEN0zq3CXnMWSKZEQrV3aO8C8DUc=
Subject key identifier:   F2:FB:12:B6:8C:6F:95:C3:F5:40:73:71:AB:87:FB:E8:E3:EA:92:6C
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F43285844F4655A4543E85964E23CF4C0
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/dc0902e4-7edd-3d46-8f4b-730bf1c57e5c.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     400136
IP address blocks:        24.149.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:5a:45:43:e8:59:64:e2:3c:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=303ad1fc-1da6-4178-a484-0fd6fd6ccb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:68:27:86:7d:4b:49:9b:62:d7:4d:01:b2:
                    28:f3:72:c6:a0:08:df:e6:29:09:c5:36:5d:c5:05:
                    8e:d7:54:22:e1:ec:a9:09:74:a0:11:28:3d:d4:d9:
                    af:d0:bb:97:29:a3:0f:02:c6:f8:e0:c1:0e:c6:c4:
                    04:f6:84:05:91:ea:52:90:cf:58:c8:93:7f:71:62:
                    99:b3:75:9f:06:00:d5:c1:5d:a6:a8:05:84:69:9b:
                    f4:16:8b:6a:e0:58:d3:5b:11:bc:99:0d:6f:86:f3:
                    43:24:dc:26:c2:ff:80:82:2e:cc:cf:ff:50:40:77:
                    18:9f:2b:f6:87:47:72:d9:a7:35:7e:1c:03:3c:2f:
                    ae:d5:63:d9:4d:a5:b4:9f:7a:ad:be:6e:52:0a:02:
                    08:db:07:15:b1:ff:47:84:1d:96:45:5f:de:f1:e0:
                    74:13:60:c6:50:34:00:d2:1f:04:4f:fb:61:0f:e5:
                    e7:7a:42:d8:f5:9d:41:8a:ee:52:58:03:21:b7:fb:
                    1e:ea:38:f9:7d:4b:a7:60:59:99:20:c8:f6:0c:44:
                    f6:aa:b5:05:7c:aa:a5:bc:bf:d8:e9:d9:48:d2:be:
                    7f:01:dd:69:39:d8:41:c3:3d:66:b8:db:cf:6c:12:
                    1e:2d:4a:65:68:f8:81:06:d6:d0:32:6f:d4:7c:ee:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:12:B6:8C:6F:95:C3:F5:40:73:71:AB:87:FB:E8:E3:EA:92:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/dc0902e4-7edd-3d46-8f4b-730bf1c57e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:98:89:e5:6c:91:87:64:44:3e:e1:af:e6:7b:07:0e:ee:
         ef:8a:ee:6f:b4:3a:9f:39:4a:9f:4d:30:97:5b:5d:66:74:89:
         b8:11:21:92:51:09:fb:26:db:62:37:d8:c8:c9:3c:84:df:78:
         8f:aa:c3:c5:bc:6d:0f:25:8a:ea:6e:99:32:86:1f:d8:4b:68:
         51:f3:b7:f2:01:d1:a9:06:e7:cc:bb:06:31:af:90:3c:d6:88:
         b8:f7:53:fd:6a:22:a9:cf:cd:01:a3:9e:ac:3b:6a:35:5d:e7:
         c3:d4:da:b2:c9:a4:1c:d9:b7:c2:90:b7:b9:5a:30:33:57:ef:
         09:32:0a:65:9d:a1:bc:03:3e:97:3b:46:cb:d2:1e:ff:1f:73:
         a7:71:ff:a5:69:84:fe:33:c6:95:15:57:ae:07:3a:4c:da:5f:
         3d:68:1c:28:53:85:87:5b:04:25:e6:17:d7:81:44:f3:ee:3e:
         9b:20:62:17:f4:c7:4b:dc:e4:81:41:b9:0d:51:3c:3e:a2:a6:
         41:18:82:7d:ff:7b:54:63:54:97:52:9b:2b:f6:d3:71:f6:c3:
         21:00:71:50:10:e6:9b:58:aa:7c:a1:8d:2f:03:13:8e:79:c2:
         79:3f:22:3a:df:ef:fe:f8:cd:07:e1:6c:20:aa:70:5d:a0:aa:
         cd:d3:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:51 2024 by rpki-client on console-fra.rpki-client.org