Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
File:                     873d4b38-1604-341a-a8a0-f8b12792ef66.roa (raw, json)
Hash identifier:          W43hmAk3VG1/LmeSlulnZofDf9pdr6D+jlZl9yHpiXs=
Subject key identifier:   00:65:27:A0:BE:7B:2D:30:1C:75:32:88:68:D3:09:35:93:C6:52:FE
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D3DC194A2FAA00123974080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
Signing time:             Tue 09 Apr 2024 14:26:33 +0000
ROA not before:           Tue 09 Apr 2024 14:26:33 +0000
ROA not after:            Mon 08 Jul 2024 14:26:33 +0000
asID:                     16696
IP address blocks:        148.59.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:3d:c1:94:a2:fa:a0:01:23:97:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 14:26:33 2024 GMT
            Not After : Jul  8 14:26:33 2024 GMT
        Subject: CN=1b754a3d-d204-4d4b-a05d-94d000e9591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:25:04:d9:fd:57:e3:3b:f9:61:23:72:49:
                    3d:5b:4c:f3:70:30:cb:ff:bb:ea:27:06:55:e1:f4:
                    00:a0:0a:d4:9f:1a:d5:87:6b:bd:27:00:4f:d2:6d:
                    22:9a:2a:90:9c:78:cc:bf:58:b6:b4:10:f4:53:79:
                    66:ec:d1:ad:60:8d:05:9b:2a:e2:3c:0f:e6:ee:de:
                    c3:6f:c3:82:e3:26:2e:24:fa:1c:8c:ec:d0:31:4d:
                    32:7b:50:09:ef:aa:74:5a:78:13:09:78:20:03:7d:
                    f3:72:c7:79:6b:7b:0f:89:34:d7:3e:72:83:f3:23:
                    90:86:dd:72:86:66:89:7c:50:ee:35:de:a0:a2:0e:
                    25:c0:30:e1:cb:c2:b8:61:d1:b8:13:ce:8b:3a:de:
                    7c:70:e0:a2:91:ee:2d:5f:7b:74:3e:10:f6:c2:c2:
                    12:fa:38:bc:dc:50:75:14:23:5a:1f:83:58:30:d1:
                    0e:7f:cf:fb:0b:e6:4a:83:29:ff:ab:0f:e1:67:d9:
                    d9:0b:bf:84:05:32:98:be:f8:f7:62:60:8d:4e:9b:
                    77:2c:f3:58:a9:b1:79:c9:fc:94:ff:bd:ae:93:68:
                    f7:16:9e:e6:0c:aa:d4:ad:cd:19:f3:2b:53:02:98:
                    19:61:d2:bd:d5:99:82:ae:b3:85:89:26:d9:56:cd:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:27:A0:BE:7B:2D:30:1C:75:32:88:68:D3:09:35:93:C6:52:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:3b:a0:24:dd:b5:d5:f6:22:46:ff:7d:4f:9b:90:bf:dd:
         36:62:23:4a:59:a2:c1:f8:6d:37:43:87:80:48:88:b7:93:1b:
         2a:67:17:72:ef:82:ae:1e:d9:4d:f2:02:c6:a7:1a:9e:28:f0:
         8e:ac:17:ea:f9:b5:8c:48:8e:f9:d2:a8:47:8a:1a:d9:62:7a:
         da:d5:5f:4e:7b:71:de:11:2b:55:29:2d:0c:ea:be:f2:ee:7d:
         9f:68:3f:ff:7e:37:dd:d5:23:60:f8:74:3a:a6:ee:63:a1:20:
         c1:be:b4:79:b7:f8:c9:88:a3:b9:4e:28:49:fa:81:74:01:48:
         8b:c6:ef:65:1f:2c:4a:05:69:f1:11:2f:23:90:61:2a:b6:1c:
         d7:d9:2c:d8:3e:e7:36:1c:67:b1:61:34:00:7a:ef:52:8c:ed:
         d1:e4:59:04:5a:1a:85:17:87:f5:4e:31:5b:02:bd:27:9d:a6:
         3a:b9:e3:c3:d9:fd:5a:08:94:4a:84:d8:d4:06:f0:f5:b9:39:
         4c:9c:71:59:ae:6a:ae:c9:82:05:9c:bd:3f:40:26:ca:79:09:
         ee:c5:97:62:19:85:c1:6a:aa:af:7c:99:a4:f3:67:d6:a2:4f:
         ad:6f:ea:8a:19:61:94:28:dd:62:72:84:af:ea:5e:29:c0:25:
         ed:e1:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:54:54 2024 by rpki-client on console-fra.rpki-client.org