Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa
File:                     dbcebc37-e1e6-358d-be23-3223f9383787.roa (raw, json)
Hash identifier:          iMot2/a3vPnszisMjqEfwpd8SCRGNYF5reYy5O/hmBo=
Subject key identifier:   3D:F2:C8:8F:D6:D7:18:6B:27:59:69:7C:36:1C:7F:C1:58:FE:99:CD
Certificate issuer:       /CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
Certificate serial:       010D0C9F43285845698869E6EBACD79607FE9680
Authority key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     394485
IP address blocks:        206.130.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:69:e6:eb:ac:d7:96:07:fe:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=4fed58d8-1eca-4cba-94ba-ee37a260c988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:64:ed:df:90:3b:cf:66:9b:54:ca:fd:2f:
                    f7:0b:5a:36:b4:a6:36:f3:48:b8:86:7f:d4:c5:c2:
                    30:37:5a:17:36:f1:50:57:43:66:e9:7b:9d:b3:73:
                    45:5c:ee:aa:ab:df:d9:5f:5f:c5:81:0f:b5:2c:8d:
                    98:35:eb:f2:49:43:2c:3d:c3:9f:2b:bc:55:b4:87:
                    fc:93:52:78:d6:bb:6e:b7:be:1b:a8:ac:c4:0f:72:
                    b4:c3:08:ac:de:88:81:09:f9:20:c7:62:38:50:97:
                    07:ca:91:0d:9e:38:c1:9d:16:6f:6f:fa:72:df:fb:
                    22:e3:b2:51:f3:6f:e3:fd:86:ed:1e:7f:3a:3a:86:
                    9e:b9:54:6a:86:78:ec:97:d8:08:8f:e0:12:87:97:
                    ea:3d:35:e4:0e:16:51:c9:14:b1:da:ec:6c:e8:f6:
                    b0:46:1e:42:2b:97:c5:be:79:9f:33:13:fd:09:62:
                    dc:54:24:0b:db:f2:71:26:01:02:29:2c:70:c3:d2:
                    d4:c8:84:5d:2b:83:12:ef:e7:1c:95:2b:ab:ac:1a:
                    69:1f:72:bd:ea:8b:2e:dc:b0:52:a7:da:aa:21:0d:
                    b3:5a:1f:53:b1:ba:9d:c6:4b:35:f0:37:d0:41:72:
                    db:db:0e:08:85:62:5f:73:bf:8f:5e:c0:59:af:19:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:C8:8F:D6:D7:18:6B:27:59:69:7C:36:1C:7F:C1:58:FE:99:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl

            X509v3 Authority Key Identifier:
                keyid:33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:21:0f:b2:e0:28:a3:8d:42:38:17:e5:fd:32:fd:61:97:6d:
         b5:b3:b7:de:3b:e3:61:ad:8b:71:36:f0:c4:16:8f:34:8f:3d:
         25:c8:67:f4:d7:d9:9a:50:af:6e:f1:7b:c8:b1:d7:88:0a:dd:
         51:cb:ba:de:19:61:ec:b9:ec:04:1c:cb:75:7d:6b:7f:de:40:
         61:18:a9:9a:2c:1f:1c:bc:68:9f:14:c5:12:4a:e3:4c:81:25:
         10:ac:ff:6c:00:ee:73:93:da:eb:bb:b8:55:69:58:8c:72:f7:
         1f:5a:71:31:33:98:72:f2:06:26:62:17:b3:e4:5e:e3:57:65:
         6c:62:0d:e6:46:b2:ee:0d:9e:54:1d:11:7d:0c:4b:4d:9f:b1:
         2f:8c:8e:c3:e6:25:fe:a1:db:6a:4c:c8:95:00:51:7b:97:18:
         11:74:bd:32:79:70:dd:7d:b6:d6:4e:0d:96:14:dc:93:80:71:
         ff:d5:55:8d:ef:06:66:76:96:06:92:37:c3:da:32:fa:e1:6c:
         ce:1e:c1:75:9f:6f:52:05:06:5e:0c:46:eb:8c:8f:7f:9b:3e:
         2f:74:96:80:ed:cc:a7:d8:86:fc:7e:61:8c:ef:c4:6c:5e:7b:
         ab:7e:c8:7c:a7:e9:dd:5e:32:84:17:36:ba:39:ca:c8:66:c1:
         33:14:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:39:15 2024 by rpki-client on console-ams.rpki-client.org