Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa
File:                     95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa (raw, json)
Hash identifier:          2v0zTlfuqWg7HyH17rc1E2uAgTiKdtgt+yk6S+5sJR0=
Subject key identifier:   D1:5D:F4:31:72:A5:3D:F1:31:3C:0E:85:C9:41:E3:E7:7F:06:74:41
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F43285845612866015087B07B734E9100
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     53334
IP address blocks:        199.38.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:66:01:50:87:b0:7b:73:4e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=b450a676-fd41-4c49-9a92-191c0a2b0bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:5b:6d:91:1e:b4:ac:11:53:c5:2c:d6:c8:
                    a0:14:39:7b:c7:46:f1:8e:62:36:50:c9:02:0b:bd:
                    64:50:77:42:bc:0b:b9:59:65:18:d1:9f:68:22:74:
                    15:11:4f:a5:39:8d:96:ca:c5:82:8d:a7:b1:a7:a7:
                    1a:53:da:92:c7:cb:77:e6:16:90:3c:7d:bb:0e:be:
                    22:df:3e:a8:f8:56:f0:c5:9e:32:31:69:2b:90:4d:
                    f8:9e:6e:9a:02:2c:6f:c5:e7:da:90:27:df:de:1f:
                    b3:ac:f1:1f:5b:05:8a:16:9c:d5:e2:14:83:b9:d0:
                    33:b2:fc:13:da:33:45:ae:2f:dd:02:83:49:57:8c:
                    7b:cd:d3:71:4f:86:63:67:57:26:7c:d3:ec:7f:3b:
                    6a:82:ef:4a:56:f7:ed:31:f2:e4:a1:88:79:c0:b3:
                    9a:80:27:bc:74:a3:5b:c6:46:1c:67:67:70:11:4f:
                    10:e8:92:ea:15:a9:24:e2:05:ea:a4:bd:55:f3:6f:
                    5d:a5:41:68:e9:ad:90:d3:e6:71:63:79:23:87:97:
                    5b:8b:4a:ae:24:ba:fb:12:ed:12:a9:16:98:81:92:
                    f0:55:44:79:b3:1a:fd:d6:64:01:d8:13:d3:66:50:
                    99:41:59:e6:a1:39:e0:bc:b9:d0:31:db:75:fb:a5:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:F4:31:72:A5:3D:F1:31:3C:0E:85:C9:41:E3:E7:7F:06:74:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:83:f3:c7:4c:ea:7a:c8:a0:ec:1c:e0:81:6f:34:48:b6:36:
         99:54:04:c5:2f:b9:4e:29:9b:49:51:cf:0a:66:5f:60:47:ee:
         2f:d9:44:5a:29:b3:e9:9d:0f:a0:95:4d:1d:ad:6c:bc:06:b1:
         19:cb:57:fb:47:eb:2e:7e:8f:72:ed:c0:e0:20:08:ef:2d:f8:
         7b:34:62:02:22:77:66:ee:a6:4d:8f:dd:68:85:98:0b:b7:db:
         66:0e:a9:f2:f3:62:77:f1:30:6f:c8:46:47:fe:c8:fc:49:78:
         f3:90:54:53:9c:87:ce:ca:f4:40:5d:e2:50:0a:74:7a:2e:fb:
         16:dd:6f:5d:91:9e:3e:13:31:2f:20:0d:d6:ef:fe:6a:bf:c9:
         04:9c:1b:21:7e:56:13:cc:bc:93:90:63:47:e7:80:b8:17:3d:
         d4:7c:ad:e2:1e:90:cd:99:7b:d3:29:53:0d:48:17:85:8e:da:
         27:b7:e7:48:e9:5c:ab:dc:ab:e9:2b:a2:8b:32:9c:b6:c6:7f:
         07:00:08:20:ea:31:57:f8:b2:53:16:27:4e:49:04:e3:6e:1d:
         ce:f5:4b:a9:d6:6a:25:f7:dc:b7:13:c2:93:5c:84:51:3b:4b:
         39:0b:c2:60:4d:4b:bf:3f:5e:75:3c:fe:6a:26:03:78:f8:ba:
         a7:d3:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:14 2024 by rpki-client on console-fra.rpki-client.org