Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa
File:                     ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa (raw, json)
Hash identifier:          uRCqeupPfT7jG75d7ssPVoiZnOJVbLNHQhdPTg4DWpw=
Subject key identifier:   34:FD:77:7A:DB:B1:4B:03:70:17:9D:E7:15:06:AE:B9:B5:AF:A2:77
Certificate issuer:       /CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
Certificate serial:       010D0C9F43285845612862A131E630ED7263DE00
Authority key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     393451
IP address blocks:        143.195.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:62:a1:31:e6:30:ed:72:63:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e6943316-d9e6-4e7f-a4dc-2ada92f076b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:76:85:2a:8b:eb:63:c9:c1:54:15:99:ce:
                    ef:78:a3:87:00:54:30:c0:c0:02:1c:3a:6f:db:d0:
                    2b:33:36:81:3d:f7:11:92:99:b9:e0:ae:e7:e6:3b:
                    f9:89:81:13:45:ca:cb:40:07:70:03:1d:aa:12:c1:
                    a5:9f:6c:44:05:77:61:ae:48:48:c2:09:51:82:b2:
                    73:ed:b3:6e:30:44:c4:fd:3f:93:2d:7f:ed:65:e2:
                    b1:8c:77:1f:88:1c:4a:91:f6:62:54:28:bc:3c:84:
                    b9:67:ab:9e:97:1b:b2:56:3b:9a:ee:32:86:c1:ac:
                    30:26:cc:ac:07:7a:87:f0:6f:7c:e5:a7:11:bf:99:
                    76:d4:f1:5d:ba:02:be:f8:36:af:74:ae:e2:3a:44:
                    47:38:c4:3f:39:6c:58:9d:18:68:c3:35:13:63:81:
                    5d:b0:1b:61:6f:cc:39:2b:12:9e:7a:74:83:3a:c8:
                    f0:5f:3e:aa:cb:81:4b:97:d2:d4:62:fd:92:06:ac:
                    77:98:68:27:ea:8f:d3:39:cd:da:9b:d1:b3:d3:ab:
                    ed:dc:85:99:bc:7a:f3:76:14:2a:d5:ca:8b:e2:a8:
                    a5:98:2e:d1:c9:fc:21:f4:73:20:ac:a1:16:29:04:
                    cd:91:9d:e8:04:29:6c:f4:5f:8e:1f:74:78:bd:15:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:77:7A:DB:B1:4B:03:70:17:9D:E7:15:06:AE:B9:B5:AF:A2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.195.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:7c:c7:02:0f:f3:fd:4a:85:db:12:d1:e8:2a:a7:1a:ad:
         2f:2c:d1:39:2a:cc:1b:74:0b:05:38:00:08:05:dd:17:93:64:
         fb:ef:6b:89:43:f2:3a:04:3c:e6:45:d2:e4:ba:ea:6c:a6:87:
         73:2a:2c:a5:2d:28:41:28:e7:d6:aa:3e:b2:e5:a2:c0:ee:57:
         e9:b3:8d:89:e4:32:49:58:8f:8d:0a:30:c5:62:52:fa:93:4a:
         3f:14:d4:bb:27:3d:93:71:55:f3:f2:35:8e:ff:c7:cf:75:36:
         db:d6:72:cc:d7:55:e1:f9:75:ed:53:68:fe:e0:61:2d:3a:9d:
         18:9b:76:53:36:02:2c:d4:26:12:65:9a:28:85:93:5c:84:08:
         7d:56:04:b7:0a:44:9e:cc:2e:ac:3c:3b:71:31:ad:ae:f0:cd:
         52:3e:3c:e9:dc:94:c2:7a:29:96:b3:09:24:27:34:94:ec:51:
         d2:95:96:f2:92:25:12:93:df:42:57:4c:cc:a1:54:80:1f:1d:
         6f:08:70:23:dc:40:e4:30:a0:73:62:ed:3a:da:6f:4f:48:8b:
         45:83:c9:8a:ef:04:59:bd:66:27:74:23:c2:f7:46:22:7f:19:
         b9:77:5f:9a:16:3c:15:4d:27:e2:5f:c8:bc:e5:41:e2:f5:5d:
         f6:8b:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:38:37 2024 by rpki-client on console-ams.rpki-client.org