Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa
File:                     8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa (raw, json)
Hash identifier:          iJFLbGtOMOka7/UQhdYrbrAIs1CF816EMm2Ngwyb6tE=
Subject key identifier:   0B:A3:FF:B5:1E:CA:C3:2C:B1:2B:26:40:2E:CE:A8:B8:A6:86:CF:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4AA38DFBE5884CFDB600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4a:a3:8d:fb:e5:88:4c:fd:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=fbc7b2ae-bdea-480c-81f7-e51ad3e10854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:3a:76:4a:6d:09:64:fa:8f:82:49:1e:58:
                    ab:3d:c8:4e:27:ff:e8:cf:7a:71:7f:db:ba:96:05:
                    7a:6b:8b:44:59:47:f8:53:2b:0b:c2:8a:ea:cf:d6:
                    7d:01:ad:52:f0:7b:72:47:ff:30:f5:bf:7d:24:2b:
                    2d:03:22:e5:1e:0f:a0:87:82:04:b9:1c:24:5f:e6:
                    05:e5:d2:f3:1f:65:eb:6f:af:14:e5:f6:3e:83:cb:
                    8b:f9:ca:27:63:38:28:55:03:70:4c:3e:ac:78:54:
                    73:b7:1d:fb:52:57:24:df:05:04:54:66:50:41:02:
                    a6:1a:66:1e:60:8e:93:53:a1:d7:7e:fc:c8:15:43:
                    7d:0a:fd:d0:96:02:c4:fa:e3:93:1b:81:d4:7f:ea:
                    ef:1f:1d:f3:3e:77:69:9f:83:f1:c5:04:01:ac:b2:
                    12:f5:2b:9b:9c:63:c9:97:cb:87:39:f6:95:09:7a:
                    23:37:a0:0a:14:b3:58:32:e6:ed:84:43:ac:0d:4b:
                    85:2b:24:47:0c:f3:39:e1:fd:ae:02:8c:63:b9:12:
                    83:e0:98:32:87:a0:8b:8f:3a:aa:35:25:7d:eb:1a:
                    98:19:68:e4:b6:1f:55:45:8d:01:cc:a8:51:c6:35:
                    63:89:a5:f2:1b:0e:a3:cb:30:d6:6f:b9:c7:5a:50:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:FF:B5:1E:CA:C3:2C:B1:2B:26:40:2E:CE:A8:B8:A6:86:CF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:12:08:e6:d2:42:98:db:f1:cd:b8:69:73:fa:2d:1b:ad:47:
         2b:dd:4f:90:5f:c0:5a:55:a0:39:9d:4d:f4:5f:c1:4c:4d:ae:
         28:e9:4d:ed:58:26:77:d8:e8:cf:88:03:3b:2f:1a:8c:a1:8b:
         f5:c7:dd:5a:4b:7b:63:30:8c:b6:d5:a0:86:f9:5a:84:9c:ea:
         8c:3e:da:ff:23:34:9d:88:c2:19:ac:ba:22:92:27:cd:10:04:
         14:de:97:14:fb:c2:a6:36:55:28:d3:8a:89:a9:11:ef:7f:e5:
         d5:e9:f2:b7:90:fd:d9:5a:83:0b:98:d4:17:0d:41:e2:7c:e0:
         47:42:9c:05:27:ed:88:63:3d:86:a3:1a:bc:d6:cd:88:e1:64:
         1e:d2:62:b2:3d:ac:95:3a:cd:3a:5b:1b:46:4b:cd:ae:bb:a2:
         e9:c9:17:dc:4c:81:56:b8:67:d9:fb:fe:42:3a:41:b8:de:26:
         0b:bc:d6:92:42:26:3e:b2:00:88:e5:45:64:37:c3:c6:9f:22:
         e2:80:51:6e:87:5d:db:16:be:3b:62:42:1f:4e:15:de:4e:e7:
         b8:64:dd:bf:13:78:4e:14:6d:fe:bb:46:1d:b3:01:73:0c:d9:
         92:64:e7:25:e4:28:ef:37:e8:81:aa:62:9f:9d:6d:6e:02:3e:
         be:42:fc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org