Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa
File:                     3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa (raw, json)
Hash identifier:          LaCEpVUjDaYYksQGPxWmh6G/vnCU+iO8S5HYTtL1CfA=
Subject key identifier:   FA:67:01:13:10:95:05:A3:BC:EE:C7:77:F0:0C:98:FC:D0:D2:76:AF
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F4328584554981AD3F675BB933EC67300
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     398797
IP address blocks:        199.255.148.0/23 maxlen: 24
                          2602:fd1e::/36 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1a:d3:f6:75:bb:93:3e:c6:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=72168f61-fcbd-4178-a08c-a7df1e8ae6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:d1:71:a0:24:1a:8f:4e:75:b0:ea:0a:f8:
                    c2:9a:bb:fe:59:d8:e3:13:b3:80:37:99:5e:bd:82:
                    7d:1f:16:47:8a:a5:b3:90:38:7f:98:8b:0f:5a:4d:
                    1d:a9:e5:87:94:fb:a2:26:a3:c8:02:15:72:24:04:
                    81:a3:5f:59:07:81:5a:00:ee:d6:2d:09:73:07:23:
                    2a:14:e1:20:5c:ca:96:0c:0e:bb:51:4f:3b:9f:01:
                    ce:6c:7b:e7:44:c6:16:23:f6:7e:22:70:98:d7:f6:
                    34:6b:6c:53:c3:d7:c3:2b:32:a4:e0:44:50:b2:ea:
                    60:b4:50:7a:5a:1e:dd:84:70:f8:8b:d0:66:1e:b1:
                    da:73:ee:b3:79:49:17:8a:cc:08:52:06:3b:34:2f:
                    cd:cf:75:5b:42:53:04:ed:18:bb:47:46:e8:cb:dd:
                    74:66:df:60:47:d8:a0:81:b9:21:99:a7:cf:23:3c:
                    7c:38:2f:89:df:89:1b:0d:e2:d0:1c:4b:bb:ba:c4:
                    fc:80:e7:0c:bd:0c:7b:4c:87:34:63:73:25:55:38:
                    14:d9:1e:a7:af:99:8d:d9:f3:28:0a:b6:c4:2c:da:
                    14:f3:43:c1:ce:2a:9f:51:7f:f0:16:06:27:1d:66:
                    21:cb:8a:62:e0:80:5d:2f:0d:1d:cb:f6:3a:43:54:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:01:13:10:95:05:A3:BC:EE:C7:77:F0:0C:98:FC:D0:D2:76:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.148.0/23
                IPv6:
                  2602:fd1e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f7:f6:95:d2:2f:c8:8b:00:05:b4:f4:2f:2f:0f:76:ad:ee:
         38:80:d9:6d:d2:39:18:02:cd:59:6e:1e:ef:13:ce:e4:12:6d:
         3d:31:d0:d0:da:cd:85:3e:bb:b0:93:cc:1c:7d:0f:0d:b6:cb:
         f5:4f:02:5b:75:24:71:f2:0e:83:45:d7:b0:6a:d9:bc:71:e1:
         a8:1a:fa:03:5d:a4:00:7c:56:04:28:bb:51:4d:4b:65:5e:34:
         40:fe:4c:41:da:bf:16:a7:5e:b7:49:28:dd:7d:81:19:fb:a0:
         2e:10:ce:96:be:23:01:74:b6:d9:5d:a0:a8:b9:e8:a0:a5:15:
         e3:f4:3b:89:5d:7e:93:80:c6:5e:20:ac:4f:a7:c6:d0:98:e1:
         f1:75:a1:25:fb:89:8b:26:66:de:74:29:e2:1b:00:8d:d8:72:
         ba:a3:33:0f:2f:e3:32:0f:d1:07:4b:60:bb:e6:1a:f0:d2:dc:
         1c:5f:63:92:a6:6e:32:69:e5:10:18:13:74:c4:2d:7a:31:19:
         75:cb:48:d1:9c:5a:c7:5b:1a:07:bf:4f:91:3d:4a:5b:73:c0:
         8d:07:a8:48:a0:c8:06:57:96:c9:0f:57:17:8b:8b:5a:10:72:
         a7:0e:a9:13:85:18:d3:a1:0e:1c:7b:d5:76:05:e5:16:1c:2e:
         1f:c7:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 12:23:58 2024 by rpki-client on console-ams.rpki-client.org