Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
File:                     554303b1-5480-3d12-8232-5e316121c2f8.roa (raw, json)
Hash identifier:          3cshrTCIcSNUW+bkPRd0O4MjHG6EIKcwvm3ju7B4SGE=
Subject key identifier:   38:31:0B:5F:AF:63:2D:C3:14:8E:6A:90:35:F6:45:F1:8F:4E:B4:44
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475EA630E7FDBD08213B942800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     46974
IP address blocks:        204.141.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:30:e7:fd:bd:08:21:3b:94:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=27f9826f-6f45-4f42-b25a-72ab52c62c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:2e:a0:da:a4:8b:e6:98:1d:02:8e:ca:d5:
                    8c:b6:29:dc:86:c4:ba:9d:ba:73:bf:50:87:af:36:
                    bc:59:1f:ef:0f:99:5f:86:49:7f:cb:2b:9c:47:70:
                    ab:ce:57:5d:5b:97:b6:16:1b:52:7a:cc:93:e4:66:
                    57:3d:c9:13:12:79:ce:18:66:b8:7a:37:86:59:ae:
                    86:6e:31:69:75:34:88:4e:fb:d1:f6:44:7e:a3:66:
                    d9:eb:ae:d6:47:e0:d1:cf:fc:f4:f9:48:6d:8f:6a:
                    08:13:f7:9f:f5:b9:a7:d4:1a:d2:66:b2:a0:46:a7:
                    65:cc:27:d8:a1:b7:19:ae:93:0f:da:98:16:cb:e1:
                    24:2a:01:e2:68:7a:4a:0e:42:99:96:9c:7b:fd:34:
                    65:c4:fb:a1:a2:37:82:17:67:87:ee:ea:d7:9c:dd:
                    0b:5b:bc:da:84:63:28:76:db:cc:c7:60:50:79:5d:
                    c3:55:9b:54:8a:e2:35:39:a8:b9:8d:05:70:8d:8d:
                    18:96:26:26:85:60:92:3a:f5:64:94:e3:00:80:0b:
                    cc:c4:95:07:11:c3:76:6a:74:36:07:c2:d9:13:2a:
                    f8:09:e0:be:e6:1f:48:be:91:f5:6a:a2:65:46:d5:
                    0d:79:da:95:e9:9c:ce:77:3e:50:c9:0c:4d:5d:24:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:0B:5F:AF:63:2D:C3:14:8E:6A:90:35:F6:45:F1:8F:4E:B4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:52:1f:87:fa:2c:be:a8:95:a2:d0:66:99:1b:c3:d9:a2:b7:
         2c:c9:46:37:13:83:bc:91:72:77:6b:b1:39:64:cc:34:05:14:
         0c:92:84:81:a0:a8:95:58:de:fe:ef:d2:0d:3e:90:25:da:10:
         71:32:bf:fa:12:8a:d2:fe:52:9f:0d:7c:c3:73:a8:4d:63:98:
         18:7c:5f:6f:7f:01:d4:16:63:b6:b6:a5:35:19:b0:5d:16:07:
         37:a1:d1:91:ab:aa:5b:6a:6f:71:54:4c:60:c0:39:2e:68:ab:
         c6:bb:c1:64:2b:44:97:b3:11:0f:66:93:05:ae:f9:eb:33:33:
         77:32:1c:4b:2b:fe:8f:19:19:ae:fb:9b:2c:62:71:dc:88:79:
         0c:ac:9d:bf:37:58:f7:a8:89:fe:8d:eb:56:63:12:48:d8:77:
         8b:2e:a0:1e:13:bb:60:be:5e:57:6d:2b:47:86:21:9a:e6:4d:
         39:ba:07:4f:5c:03:15:8c:35:db:14:88:e1:af:b9:f5:7d:bc:
         30:fa:72:bb:02:96:21:4c:04:d7:3e:44:fc:ae:ec:de:49:ba:
         b7:4a:17:19:ef:79:ed:d0:10:7a:6d:d2:10:2e:83:9f:54:86:
         45:9a:43:66:37:6e:0c:6b:c2:11:46:4d:76:a7:f0:39:6f:dc:
         4a:e2:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:01 2024 by rpki-client on console-fra.rpki-client.org