Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
File:                     2068d72c-6558-301e-83be-f2515979c63c.roa (raw, json)
Hash identifier:          HvJS9a9dA/ifGJpvXIDOVf5h0TQe+I47hZ3ebeOXJJU=
Subject key identifier:   03:10:E6:13:FE:65:D1:53:57:3F:E0:76:3B:70:32:37:34:39:14:94
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F432858458A2DD9A2A1AF150222DD62C0
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
Signing time:             Sun 14 Apr 2024 05:40:01 +0000
ROA not before:           Sun 14 Apr 2024 05:40:01 +0000
ROA not after:            Sat 13 Jul 2024 05:40:01 +0000
asID:                     14618
IP address blocks:        199.167.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8a:2d:d9:a2:a1:af:15:02:22:dd:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Apr 14 05:40:01 2024 GMT
            Not After : Jul 13 05:40:01 2024 GMT
        Subject: CN=0efbb3bf-44df-4aee-9f5f-d60fc5b68764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:c7:6e:d5:3b:8b:0a:63:d8:fa:5b:ab:e3:
                    dc:d2:00:2c:a6:bf:e2:33:12:8d:f3:e1:5c:7b:6f:
                    67:60:05:f7:cf:46:dd:43:05:81:7b:15:58:e4:b9:
                    52:0f:f8:3d:a8:3c:45:93:c4:03:d1:09:94:d1:2f:
                    ab:e2:3a:b5:8d:8f:0c:74:e5:a6:1f:78:96:b2:6d:
                    64:be:4d:fb:9e:31:19:1d:78:1d:eb:89:cc:ae:06:
                    5a:8d:cc:3b:f7:b9:67:e4:70:11:47:6b:6f:53:c8:
                    cc:b4:d9:a6:4f:aa:b2:68:43:02:e9:98:76:96:a9:
                    af:f7:a2:ae:e6:be:2e:27:cb:02:3f:5a:9f:74:40:
                    02:78:17:ad:c9:a5:98:8e:4d:c7:6d:2e:93:cb:84:
                    bc:08:7f:79:11:45:04:b2:84:28:b0:97:0c:33:15:
                    2b:60:9b:c2:b2:b3:01:7e:2f:e5:83:cc:0b:87:4d:
                    90:f7:03:c0:89:43:72:ef:6c:aa:c5:c5:ab:0d:a4:
                    ad:d7:63:c8:9f:04:aa:dd:c1:0e:c8:0b:4d:e5:c9:
                    10:b2:8c:88:c9:b0:87:32:59:e6:3f:0a:53:64:73:
                    ef:dd:a5:a1:da:59:58:33:9c:61:1d:71:a9:7d:38:
                    97:7d:72:f4:6e:14:48:80:38:81:c1:08:9c:e1:50:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:E6:13:FE:65:D1:53:57:3F:E0:76:3B:70:32:37:34:39:14:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:06:79:20:78:a0:cb:36:3e:82:2d:0c:b0:51:f2:d7:f2:d9:
         c4:d1:ad:3b:4f:e8:00:a8:71:8f:94:60:29:0c:04:04:fd:63:
         4c:4e:75:33:25:ca:5d:73:11:78:6f:0f:64:da:a3:5c:8f:9a:
         2c:61:4f:53:31:6f:6d:d4:84:2d:1a:24:40:35:1c:6f:fb:16:
         c5:1b:a5:7e:23:af:7a:e3:a6:d5:7d:3d:2e:20:88:54:77:c9:
         87:ae:40:3d:9b:f5:43:97:5a:83:55:29:fe:00:b2:5c:be:3e:
         54:c3:e9:b9:1a:87:1d:eb:bc:9e:f7:5e:46:a6:8e:7b:2a:e1:
         ed:e3:ee:6e:4a:18:30:c0:f3:b9:e5:82:cf:cb:c5:bb:52:6d:
         70:26:65:30:46:f9:1b:ac:12:f7:bc:b1:62:3e:36:fd:7f:f4:
         c0:6e:d4:6f:7d:f1:a8:e1:85:a9:dd:fb:2c:00:d8:c7:80:16:
         33:8c:a9:4b:64:49:04:92:79:07:ac:3c:dc:2f:d9:81:0c:29:
         1a:7f:1a:37:2f:57:1d:e0:e1:3c:c1:d9:57:e5:32:f3:7b:1f:
         5c:50:31:70:8c:66:d3:b8:10:9e:89:be:52:26:92:f7:08:c8:
         ec:74:c3:ff:6f:dd:9f:a2:eb:ea:0a:34:2b:57:b2:b1:6a:9a:
         a3:58:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:25:25 2024 by rpki-client on console-fra.rpki-client.org