Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/6ed5f7bb-958b-3004-ba42-d8348d55bb02.roa
File:                     6ed5f7bb-958b-3004-ba42-d8348d55bb02.roa (raw, json)
Hash identifier:          cQ2ymvgkV/TmwAOU+j4hp4jCaVEVnJ+tvHzCuOJbpJc=
Subject key identifier:   48:EF:F3:B8:18:BC:BE:75:84:78:1A:32:97:07:8E:8F:1F:78:85:4E
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285844FCC56815066323A06BD8FA00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/6ed5f7bb-958b-3004-ba42-d8348d55bb02.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     40044
IP address blocks:        198.108.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:68:15:06:63:23:a0:6b:d8:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=0a86a8ca-0f1a-4811-ac4b-ef76be693206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:9c:1a:85:fc:ca:1a:42:81:2c:a5:d4:90:
                    d5:2b:d9:41:d0:c7:f6:37:90:a4:9c:0a:2b:29:5e:
                    18:ac:22:9f:7c:d5:c8:8c:ac:02:37:7f:c8:1f:5e:
                    63:df:8b:7d:a0:1c:77:a8:ac:45:b4:7b:92:cf:0c:
                    67:16:78:e3:64:da:68:34:3d:e3:03:ac:0d:46:d3:
                    d5:76:b2:71:72:24:8b:7e:ca:40:c2:cc:27:f7:51:
                    0e:86:36:e6:36:4a:5c:0f:6d:cc:57:0f:47:f8:ad:
                    2a:40:e1:88:91:41:28:52:7f:e2:18:bc:10:f4:7a:
                    c5:77:a4:d1:54:67:3b:cc:fa:ef:c2:f7:0e:48:22:
                    c7:45:ce:7b:31:a9:04:07:2f:99:a1:aa:fc:62:49:
                    ea:02:55:b8:17:ae:b2:ea:70:56:5c:6f:0c:23:4f:
                    e6:a0:03:e3:ca:a5:9e:8d:c7:44:a4:3d:ff:7f:27:
                    41:bb:37:8e:59:2c:3f:77:d9:60:3a:95:2c:8d:fb:
                    23:9b:44:c6:01:6f:7a:67:db:b9:67:86:da:f5:a3:
                    4c:69:e1:fa:fc:9b:a7:c3:69:ec:7b:e4:0e:88:80:
                    7d:4d:7b:c8:1a:64:e6:6f:2f:53:cc:f7:c4:c6:1f:
                    a1:e5:a0:4d:5e:67:e7:e5:24:31:83:5d:51:e5:05:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:F3:B8:18:BC:BE:75:84:78:1A:32:97:07:8E:8F:1F:78:85:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/6ed5f7bb-958b-3004-ba42-d8348d55bb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.108.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:69:fe:77:aa:a6:54:06:11:c2:49:43:4c:49:00:47:ac:
         f6:cf:64:0f:31:84:26:6c:3a:ab:4b:29:a9:f2:92:dd:97:1a:
         ac:fa:91:64:42:41:aa:4f:8e:4a:ed:20:87:88:e9:b0:53:04:
         43:66:73:ba:cc:61:74:c0:e6:31:10:b8:e1:43:19:70:ae:d2:
         b5:b2:61:23:9e:69:78:80:81:32:21:1b:fd:db:c5:c2:a3:fe:
         df:0e:4d:6e:84:81:f1:4e:49:6a:08:e8:a0:d9:00:43:c9:27:
         d2:99:c2:e6:fa:d4:bc:12:75:f6:6c:2b:a6:66:1e:c2:59:72:
         13:2e:28:6f:b3:16:67:28:0b:22:41:3b:be:a3:4f:eb:1a:85:
         a9:0c:95:de:8b:9c:e4:26:48:ec:74:81:e5:aa:ba:2e:a6:27:
         54:3e:4b:88:00:87:f1:29:f7:c6:d0:06:e9:ce:63:e3:ce:a8:
         2b:19:1c:5f:5e:c6:87:5c:9e:e8:04:49:ab:c7:b3:fa:d1:29:
         1a:bd:50:72:cf:9d:d7:a3:7e:0c:71:2c:c3:24:bb:fb:b0:79:
         43:cc:09:b6:29:05:e4:3d:b7:2c:df:d4:a9:a3:86:e0:62:92:
         02:96:e4:ce:56:0a:5a:b1:51:53:42:5e:9d:d9:15:a7:ab:8f:
         52:ff:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:13:26 2024 by rpki-client on console-fra.rpki-client.org