Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd270c7a-2090-3374-ba3c-b90b52d096e4.roa
File:                     dd270c7a-2090-3374-ba3c-b90b52d096e4.roa (raw, json)
Hash identifier:          Bm187qP/BYQ4G8qzzowdiC2/R7eCIVZkW8cwqoYpLp0=
Subject key identifier:   29:49:3D:1C:78:BC:79:A9:86:B6:A3:42:EB:15:A5:27:EA:5E:EF:C8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A207CCF71
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd270c7a-2090-3374-ba3c-b90b52d096e4.roa
Signing time:             Mon 15 Apr 2019 10:13:31 +0000
ROA not before:           Mon 15 Apr 2019 04:00:00 +0000
ROA not after:            Fri 02 Jul 2027 04:00:00 +0000
asID:                     202623
IP address blocks:        198.41.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:20:7c:cf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 15 04:00:00 2019 GMT
            Not After : Jul  2 04:00:00 2027 GMT
        Subject: CN=797c5b14-8412-4ae5-b42b-fddd5b99fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:e6:a6:58:5c:d2:b0:bf:12:46:b8:12:12:
                    e5:08:70:3b:6b:25:7d:01:c0:51:4e:8b:75:42:cc:
                    07:f8:fb:d9:2d:ae:d2:b0:48:8e:8e:98:10:6c:b9:
                    af:da:c4:33:67:22:33:41:cf:25:02:47:a3:c1:00:
                    67:fd:99:78:c5:07:10:60:52:4a:b6:df:5d:02:73:
                    36:03:21:6f:cb:40:5e:f2:15:4b:e3:bc:45:95:28:
                    d3:e3:47:bb:f5:3c:c2:88:6d:59:a2:1d:a9:94:23:
                    db:65:a1:1a:12:79:fd:65:4d:73:79:c1:06:b4:6d:
                    16:0d:96:55:b4:80:1c:06:f6:60:67:8a:c4:67:88:
                    ae:7d:36:8c:66:dc:19:fc:78:b4:0f:b8:f9:a5:f9:
                    0b:ff:c2:56:08:63:fe:73:07:6b:dc:f3:fb:9f:60:
                    92:e0:f1:a5:d9:60:ac:3d:79:3e:9d:e8:5f:f3:10:
                    53:2c:06:52:20:3f:78:a5:eb:50:61:33:f4:de:5c:
                    72:bd:40:25:02:c9:d2:5b:bb:31:89:ba:40:a9:a4:
                    f1:13:c7:0f:6e:4a:19:01:26:d1:4c:3b:91:85:d1:
                    ba:eb:9e:7e:2f:03:f1:91:e2:a7:f4:76:cb:45:ad:
                    f4:b2:09:c6:90:d9:91:de:0f:ae:bd:55:09:d1:99:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:3D:1C:78:BC:79:A9:86:B6:A3:42:EB:15:A5:27:EA:5E:EF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd270c7a-2090-3374-ba3c-b90b52d096e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:46:36:4e:e9:64:d5:73:72:53:91:cf:8e:50:e6:55:4a:7e:
         0b:9c:a0:e3:16:d9:8e:23:75:3a:ef:c0:f9:be:8b:81:53:70:
         ac:08:c4:d9:f3:18:78:3b:1d:fa:17:12:4f:3f:4f:64:a4:7b:
         3a:04:29:85:b7:08:79:a5:ac:5c:90:87:1c:df:c4:66:0b:06:
         67:02:df:47:59:02:7e:b6:a9:90:b7:f5:7c:21:35:ca:ba:6e:
         15:53:66:c1:df:4c:c4:38:cd:e2:25:aa:81:de:07:01:cb:06:
         ed:05:66:ac:a8:9e:55:5a:6e:99:57:b6:a2:29:f4:49:9a:ac:
         40:c6:39:31:8b:ab:2c:91:73:1b:fa:a9:d5:54:c2:4a:14:90:
         b8:ab:92:67:ab:03:1b:8d:e7:41:cb:8a:bf:d5:e5:d0:25:04:
         35:fe:ed:5f:3d:ae:21:84:16:16:42:ee:62:54:b7:b0:78:1d:
         78:f9:d9:a3:a0:71:5e:a1:a7:72:cb:ae:6c:13:6a:58:67:85:
         8c:6d:d5:bc:a8:d7:8e:35:9c:67:db:c0:b4:c5:10:ff:7c:57:
         7f:0e:30:f2:ff:91:4a:a7:7b:e0:33:b8:1a:5d:2c:a5:a2:8c:
         4a:f9:64:b6:1c:4c:94:42:8e:bb:69:74:66:64:3f:da:2f:ce:
         61:c9:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org