Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0dcb94f-00eb-3132-bbb5-8e4aaf1f7fda.roa
File:                     d0dcb94f-00eb-3132-bbb5-8e4aaf1f7fda.roa (raw, json)
Hash identifier:          eTf9GIMCvdFvEc8mJOZKmCrlFoxQeb9V4XWqFjsBi7w=
Subject key identifier:   78:57:41:87:7B:C2:A8:D1:C0:29:18:11:73:D2:CF:1A:FD:9F:4F:24
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F1F47061D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0dcb94f-00eb-3132-bbb5-8e4aaf1f7fda.roa
Signing time:             Thu 19 Dec 2019 17:49:05 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     395988
IP address blocks:        204.142.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:1f:47:06:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=6460d264-e172-4e2f-bf59-099b4a92ac85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:1f:30:06:40:21:28:3d:67:1a:c1:67:85:
                    e3:2b:3e:cb:47:8a:7a:9d:9e:e5:ab:b8:e3:2f:9a:
                    dc:b5:f4:ba:20:cd:3b:ec:35:6c:65:0b:69:35:64:
                    db:b5:11:70:a8:41:3d:de:dc:d1:80:81:3d:f0:a1:
                    6d:7c:49:22:58:23:94:de:96:a6:b3:ec:0f:c2:27:
                    ba:32:38:2c:e1:ea:1f:fa:f9:1b:73:e4:a3:9c:37:
                    17:e5:84:dd:72:69:fa:c3:8a:1c:95:cc:40:54:f8:
                    19:b0:79:a4:42:0b:fd:aa:22:7b:f8:23:54:88:53:
                    39:44:ce:7a:0c:99:5e:fd:fc:b1:d0:e1:70:25:be:
                    76:5e:fb:dd:48:59:18:44:a3:c7:f3:4e:e7:15:c8:
                    8c:22:62:dc:25:01:54:b6:11:c4:f0:14:63:49:f9:
                    57:e6:1e:53:cc:5a:45:d5:70:b4:57:58:14:4d:38:
                    bf:63:81:2e:66:71:1d:57:d4:c6:a4:32:1d:03:6f:
                    bd:87:dc:11:e1:59:1d:0e:9b:95:bb:68:bb:d1:e3:
                    4e:76:41:dc:2e:3a:df:77:dd:b5:d8:35:ce:8e:8d:
                    6d:01:09:8d:e9:f2:ff:03:8e:d7:ac:9c:a1:87:74:
                    19:2c:68:8f:84:49:f0:62:05:11:ab:f5:7c:4d:70:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:41:87:7B:C2:A8:D1:C0:29:18:11:73:D2:CF:1A:FD:9F:4F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0dcb94f-00eb-3132-bbb5-8e4aaf1f7fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.142.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:1e:3f:74:e4:db:ed:42:a2:48:8b:19:fb:9a:2d:68:59:
         17:23:e1:cf:7a:f0:37:f8:b1:d5:2a:3a:f5:b5:10:a0:56:df:
         c2:cf:96:5d:3e:ee:9e:d6:c7:e2:41:ee:48:b3:c1:36:90:f3:
         f4:e7:65:f7:cb:4e:f3:66:6b:8f:0b:07:4c:b4:5c:c8:bc:7e:
         07:a7:a2:fe:a2:de:29:28:46:2c:45:47:af:fc:a8:e1:85:67:
         8d:28:a1:e3:95:85:b3:40:b5:da:99:e6:ea:88:a0:e8:b4:c8:
         25:91:7f:e2:b2:99:a1:39:ba:58:0b:16:1e:fb:f7:73:f8:84:
         39:db:42:07:ae:7e:03:87:15:0d:b2:77:24:17:95:2f:2a:42:
         f9:11:8a:9d:36:ae:6d:ee:b9:f3:09:ee:ec:d3:12:33:3b:b4:
         91:98:bf:f2:2c:fb:80:1f:0c:89:ef:03:46:9c:ed:30:0e:b1:
         4d:5a:2e:62:46:c9:30:6d:c6:ed:1c:b2:51:5c:cb:0c:1b:74:
         7e:cd:e6:54:9a:24:d2:2d:9f:a6:8c:3e:37:53:79:98:3a:69:
         fc:a8:ac:4c:24:d8:29:ec:77:22:9c:1b:88:68:fc:33:33:75:
         a0:f8:8c:a2:f0:61:9c:82:a4:0c:7d:11:0e:7f:0a:89:5f:e6:
         c8:93:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:07 2024 by rpki-client on console-fra.rpki-client.org