Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa
File:                     ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa (raw, json)
Hash identifier:          Jk0VSxOrrGH8/Af0Rb350VTqFIbJicCZfagdqZ6+ObQ=
Subject key identifier:   F6:CA:C7:E5:DA:3F:CB:05:E1:E5:BC:56:8F:B8:5F:1A:4A:4B:DF:25
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584570830A56769F22E70F62F600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     398202
IP address blocks:        165.254.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:0a:56:76:9f:22:e7:0f:62:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=027f4b5a-d6c3-41ad-a79b-87a0050be3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:e2:0e:a7:c6:fe:63:30:2c:46:e6:31:c8:
                    4d:3f:d9:78:d5:c3:87:76:12:ad:4b:74:d5:07:ee:
                    cc:25:20:bc:41:36:a7:5c:6f:ab:21:dc:67:2b:2f:
                    27:08:71:30:22:13:cd:0c:b7:55:5b:9a:0c:02:fb:
                    07:9d:8b:76:58:6f:1d:9e:bc:67:04:2b:5a:c0:67:
                    8d:0f:a6:04:d5:f9:83:c2:2f:2c:31:95:56:9b:cf:
                    d3:a4:bc:df:05:80:1a:50:60:60:84:27:76:70:f5:
                    04:e5:77:29:4c:8f:c9:fa:2b:a1:bc:b6:d1:30:bd:
                    d3:ec:9f:d6:25:36:7b:0c:64:3f:47:8e:86:fe:6c:
                    1c:24:71:d2:9f:13:fb:33:ae:44:a7:80:9e:cc:59:
                    e3:c3:3b:6e:31:b8:73:a2:8a:d3:fd:bf:f7:c6:9f:
                    0d:2d:be:22:59:c9:6e:64:70:e4:57:84:88:f4:8d:
                    6f:33:fa:6f:48:23:72:32:84:29:ae:91:5e:0c:74:
                    3a:1f:ca:75:1c:f3:7a:75:ff:ea:0f:c2:f5:ab:ac:
                    ab:e3:95:44:b4:f5:3d:db:2e:49:26:c7:18:72:7f:
                    20:7f:f2:0a:a7:d8:10:48:b8:c4:f5:08:ae:7a:f1:
                    83:f7:8d:6b:02:0c:47:1d:e9:ed:50:6b:25:e2:42:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:C7:E5:DA:3F:CB:05:E1:E5:BC:56:8F:B8:5F:1A:4A:4B:DF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:92:5e:80:62:a6:25:e8:76:70:7c:c8:0a:e6:c4:07:48:
         2f:54:d7:e3:e8:41:0a:b3:13:47:b2:77:b0:49:09:0b:d0:3f:
         2d:0d:40:80:45:c1:f4:90:5b:d0:4b:ff:12:9d:92:88:5a:17:
         50:7e:b4:6e:2c:ea:95:d2:e5:3a:6c:58:e7:53:ee:e2:37:82:
         b3:5c:4d:6e:50:35:a2:0d:44:db:92:05:db:d3:fd:ef:42:38:
         e7:49:2b:03:6b:12:d2:40:fd:49:73:50:b3:07:4b:e4:01:ff:
         67:a9:46:18:54:08:48:2b:31:04:7c:25:e2:c1:b1:ae:02:e7:
         d3:ae:e9:9f:ea:dc:66:de:c7:97:1e:48:36:49:71:df:3b:d5:
         8b:44:41:0f:71:b9:e8:f8:eb:b6:0d:c4:a2:2a:ed:5a:95:da:
         31:97:ee:45:dd:fe:e3:bb:6f:af:c1:d9:bb:08:e4:dc:6a:26:
         5d:23:8b:91:c5:c2:08:f7:81:20:57:4d:71:fc:7f:67:8a:7b:
         ee:37:7a:04:d2:3e:ca:18:ed:2e:34:8d:65:ac:ff:cf:a1:3e:
         79:99:9a:85:c0:27:f8:c4:17:d3:95:fd:a3:f3:71:86:1c:bc:
         db:40:d7:51:d8:02:50:95:6c:b7:4a:4e:d2:fa:bf:bf:29:60:
         be:8e:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:59:30 2024 by rpki-client on console-fra.rpki-client.org