Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa
File:                     0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa (raw, json)
Hash identifier:          KvXbBYcFBzfg6rwKgBIGWvAH+P+dvm3+BnsZalmMi14=
Subject key identifier:   E7:5A:65:EC:21:5E:AE:85:56:20:20:B5:88:70:F2:9E:73:35:8B:A0
Certificate issuer:       /CN=b67bd843-21be-45d4-8f47-607465f96339
Certificate serial:       010D0C9F432858456128665FA2C7B18FFDF75200
Authority key identifier: 41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     10308
IP address blocks:        170.76.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:66:5f:a2:c7:b1:8f:fd:f7:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b67bd843-21be-45d4-8f47-607465f96339
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e438baee-c9f9-4e01-98bf-52a1d352688c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:c4:a2:0f:e6:af:dd:ca:87:33:97:71:c2:
                    33:78:9c:56:77:0f:a8:6d:ce:3f:11:6c:07:ed:79:
                    bc:b8:06:57:6a:cb:fe:bc:95:2a:5d:08:57:c7:d6:
                    7d:3b:68:0e:88:a1:5a:24:60:3f:2d:75:6c:75:49:
                    e3:35:9b:4b:f3:04:ad:aa:67:d3:42:96:82:66:91:
                    a2:fd:3d:a9:88:29:b2:72:4a:ce:b8:36:d6:6d:07:
                    c6:98:33:b0:d4:a6:8a:d8:b1:8c:28:6d:a3:f3:a4:
                    38:21:ee:49:3c:0c:21:36:9d:16:c8:9e:27:02:92:
                    2d:e0:e8:f4:81:c2:86:d2:72:51:d0:0d:23:34:a8:
                    78:59:5d:34:3c:79:f2:63:cc:1d:2b:84:48:88:03:
                    2b:22:02:49:42:fe:6c:0e:b2:0e:8f:ed:9a:1c:14:
                    f5:85:c0:91:6c:05:bd:8d:04:f5:fe:85:2a:0d:f5:
                    d6:64:5c:0e:6a:cf:74:ff:6b:d1:6b:d7:f5:85:ec:
                    97:dc:cb:6d:d8:32:9c:e2:9c:01:68:2b:1b:af:e2:
                    70:c9:99:65:6b:cd:71:88:b8:ba:2e:19:00:14:4d:
                    85:d7:e0:eb:56:94:ba:fe:60:0e:39:a7:f2:59:67:
                    37:77:90:d0:92:99:3c:72:e7:99:69:7c:ad:6f:10:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5A:65:EC:21:5E:AE:85:56:20:20:B5:88:70:F2:9E:73:35:8B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl

            X509v3 Authority Key Identifier:
                keyid:41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:53:8b:b7:21:d8:54:05:b1:d2:c6:28:c8:ad:5f:70:3e:
         74:0d:78:a1:eb:8c:60:e9:23:b9:8b:98:e4:4f:5c:eb:2d:21:
         43:95:12:73:f6:c9:c9:47:70:f8:4d:e4:ec:d3:32:6e:4f:f6:
         24:04:40:83:f8:2d:45:9d:e9:cd:6d:b4:6b:98:c4:98:ab:bc:
         a0:21:3a:db:60:72:84:d0:2c:de:60:57:c1:f4:24:f1:df:7a:
         5f:ad:fb:f5:86:e5:29:2e:52:b5:1c:3d:63:53:47:6a:17:0d:
         4a:c4:d0:20:a3:70:cd:43:b9:fb:31:a2:39:9d:37:9b:05:81:
         ee:eb:54:84:38:ff:a8:5b:77:ce:07:21:ee:d9:d5:86:aa:41:
         e6:5e:96:e2:71:d7:e2:41:28:64:db:e2:8c:9f:24:30:da:fb:
         a7:e3:5c:09:61:13:48:ae:4b:3f:3a:ea:39:e1:d1:36:cc:4e:
         59:0b:8c:64:44:05:7d:7f:2b:37:b3:18:5f:56:a5:b3:5d:36:
         9f:de:5f:97:04:c4:e1:f8:1b:ad:22:d7:5e:c9:7c:43:28:5a:
         b0:e9:a4:97:f4:d5:37:db:a0:bd:ac:07:21:47:43:cb:5f:a9:
         03:02:6c:d8:7e:c0:70:82:83:9b:c7:e5:95:59:f3:f7:52:72:
         a8:9f:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:52 2024 by rpki-client on console-ams.rpki-client.org