Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa
File:                     1bf077d6-68e0-35e4-9a86-4683bff20968.roa (raw, json)
Hash identifier:          anziyppZDV03AeMiK4WjWjJrX6G5e+Fk36p5u9jC+5U=
Subject key identifier:   70:E5:B9:CC:0D:C8:2A:9A:BA:62:FB:68:18:CC:81:5D:20:93:7A:47
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584500F5644E7EA4AA411EB2E160
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     26421
IP address blocks:        209.150.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:64:4e:7e:a4:aa:41:1e:b2:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=964ad7bf-46cd-4e1a-89cb-d2d8c74da198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:01:90:93:a7:79:2d:61:9f:19:a9:7e:55:
                    fd:d5:29:d7:d6:fb:fe:10:81:16:77:00:76:3c:18:
                    62:87:ad:b0:dd:b9:42:47:fa:3a:b7:5e:a3:cc:d8:
                    f0:1b:b9:8a:7b:16:91:e8:cd:bc:fc:0f:77:7c:02:
                    41:57:41:5b:74:40:2e:a3:8c:bc:36:48:68:df:71:
                    69:8c:aa:0b:bd:0e:8f:d2:ca:79:37:c8:ab:66:a7:
                    d2:96:21:bf:0f:5f:bf:fa:02:d9:ad:9a:d7:8c:75:
                    db:d6:46:3a:83:e3:fa:89:e2:38:19:0f:1c:b7:c1:
                    74:7d:ce:d8:6f:a8:63:d5:77:d1:5b:aa:3a:cf:d5:
                    46:da:46:dd:b5:1d:ec:77:9c:89:38:d6:5d:29:3d:
                    dd:0e:7c:7a:50:7a:91:24:0e:4f:36:03:e0:de:57:
                    af:cb:8c:88:06:5c:b7:12:71:b6:4c:b6:02:5a:d5:
                    88:ea:f6:b4:68:6d:68:a4:8f:5f:19:56:5d:87:61:
                    fd:ac:79:f2:80:97:32:35:52:6e:6a:86:9a:45:de:
                    86:07:0e:2c:70:95:69:ce:12:ff:f0:10:f1:4e:e7:
                    96:29:4f:0e:52:5b:b6:f1:47:08:e3:2f:1c:a6:c2:
                    b9:07:8e:e7:7c:87:d5:08:67:36:8d:5d:34:85:19:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:B9:CC:0D:C8:2A:9A:BA:62:FB:68:18:CC:81:5D:20:93:7A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.150.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:15:ca:13:b7:a9:ac:07:ac:a1:9f:fd:2b:74:ce:3c:7c:
         e6:6b:91:67:23:e4:16:64:d4:71:90:70:7b:4d:a2:69:bb:50:
         d3:8e:5e:c6:14:97:0b:77:d0:9a:93:8f:39:f8:90:94:f8:0a:
         f3:60:a3:91:24:e1:39:11:25:db:9c:17:07:c4:e3:32:f3:dd:
         63:21:c5:d7:5d:33:22:41:16:3a:37:69:e7:08:4e:8a:06:c2:
         83:5e:1e:e0:23:32:7b:a9:0b:61:4d:10:50:e3:4c:8c:6e:ca:
         a9:ec:28:61:63:62:ab:40:bf:95:eb:1f:b3:fc:dd:c4:33:25:
         99:08:fa:8a:7c:fa:af:36:0d:da:39:af:a9:f3:ec:e7:51:e6:
         41:4d:e6:0e:54:5e:ac:43:74:07:9d:99:d3:3e:1c:10:76:7d:
         3b:f8:c5:90:02:2c:09:bf:04:14:a5:60:54:a2:58:e4:0d:22:
         6a:92:aa:11:f7:aa:76:ba:bd:64:0a:cc:b4:93:74:92:85:f4:
         c1:4d:95:f8:9f:1e:7f:37:f7:db:e9:b4:62:ec:b2:ef:13:7b:
         00:7c:ba:52:ce:42:30:c5:7c:85:31:c9:8c:91:48:78:a4:66:
         6e:25:50:22:75:3f:79:d6:e5:9f:82:33:c9:5d:3c:77:13:43:
         43:16:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org