Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa
File:                     4199fdb2-52b2-3293-9988-f8544855d1a2.roa (raw, json)
Hash identifier:          jp9eInAcJerXR7DwTsb/g2r5g+dryLAMpo1WlbbkVIE=
Subject key identifier:   BD:24:72:4E:B9:54:67:CB:8A:11:A6:FA:95:B2:9E:4F:B1:62:53:DE
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E3192A2DCB0A2FFCCD900
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18594
IP address blocks:        208.70.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:31:92:a2:dc:b0:a2:ff:cc:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=d72ff971-0aa7-4853-b2e5-97175919e0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:dd:46:49:70:f4:f6:aa:f5:3b:d3:87:5f:
                    18:fe:d8:cc:5b:7a:1b:3b:dd:57:6a:4b:c0:35:a4:
                    9e:6e:0c:2c:65:19:bb:81:76:8d:70:92:3f:dd:d5:
                    ff:e4:b9:d2:9f:78:93:5a:71:26:10:24:c4:98:78:
                    42:bc:f3:b5:56:4d:ba:96:77:db:f8:9f:1e:fa:50:
                    60:f3:42:1c:16:46:d3:b0:51:56:66:0e:32:cc:0e:
                    cb:ca:60:71:9d:6b:6d:e3:08:fe:97:c6:78:af:04:
                    df:77:90:e3:90:0b:ac:4c:b3:b6:33:ea:0b:a0:bc:
                    7a:cd:cc:76:fa:3a:77:4b:3c:4e:c0:80:d4:94:24:
                    81:5f:b0:23:f9:7a:a5:df:3c:a3:44:53:24:4a:94:
                    34:f2:bd:1e:f0:fa:4d:97:af:60:1e:6b:c9:11:74:
                    6f:b0:00:3a:c9:3b:ee:11:96:57:09:f7:5d:0b:05:
                    50:ae:42:0d:4b:c7:be:e3:f3:49:cf:df:86:8d:0c:
                    1c:8c:6b:eb:bc:dd:c2:bd:7e:04:ac:ae:d5:4a:fc:
                    d1:5f:90:15:c4:6f:63:65:2e:3b:ef:2b:9d:36:45:
                    8f:8e:bc:cb:88:d5:70:eb:a7:e9:10:ac:8c:c0:cc:
                    36:6c:dc:3d:61:1f:7c:4c:81:ac:dd:f1:88:6b:90:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:72:4E:B9:54:67:CB:8A:11:A6:FA:95:B2:9E:4F:B1:62:53:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:17:95:03:8e:58:4c:65:f8:ad:9a:ba:c3:c1:af:2e:01:
         4c:ce:74:af:12:09:71:54:9b:a4:f8:c8:4d:c8:9b:3b:49:2a:
         47:6f:cf:39:f0:d2:c3:46:d9:a6:9e:ed:f3:ba:89:44:32:2b:
         fe:ce:e7:70:31:f2:54:d8:11:fb:7d:fb:ab:41:3c:31:44:10:
         f1:40:c7:9c:22:71:ed:9a:dc:12:98:5d:f8:31:bb:12:f8:c1:
         4e:81:80:b5:ec:1f:cd:64:a8:ad:95:f0:c3:10:f1:d0:e7:33:
         cc:bf:39:03:ad:fb:e1:cf:2e:63:d9:b6:1f:22:4e:ad:20:1d:
         76:e0:68:0c:14:e3:56:2b:72:af:96:e3:88:d3:1c:6e:da:90:
         b3:a7:20:16:a4:70:de:9f:da:98:1c:c0:75:65:f5:d9:7b:75:
         a4:17:e3:4a:66:45:bd:c8:d8:7d:8c:4b:b4:ad:d3:9d:88:91:
         9b:e7:1e:46:11:c9:ec:d5:cd:db:cf:f2:f9:22:b4:ef:ec:54:
         81:30:a3:f2:53:2c:a9:bb:e8:c9:f2:13:8c:48:30:97:b8:bd:
         09:9c:4d:56:6a:07:7b:ec:70:ef:52:4a:b6:80:99:e3:a9:3a:
         39:f6:8e:20:76:a8:ef:ba:44:bf:cb:08:f1:1b:39:42:cb:b9:
         95:dd:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:54:08 2024 by rpki-client on console-fra.rpki-client.org