Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
File:                     9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa (raw, json)
Hash identifier:          31U7rUqKRY7/WqY8IMXDxqigr5r+wdA2NPS/H+CrQrk=
Subject key identifier:   CF:D0:56:E0:74:B4:31:77:25:3F:7D:3E:B5:F2:12:AC:72:32:B8:73
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584582A8901FC17D72A1FF421180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     3223
IP address blocks:        206.123.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:90:1f:c1:7d:72:a1:ff:42:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=800f29e9-bd31-46ac-a1a3-bf759fae6f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:b9:3c:13:2a:4f:34:d7:88:61:43:2a:23:
                    cf:37:42:97:ff:3c:27:c3:eb:c3:35:ca:db:5e:7d:
                    da:4a:d9:48:f9:91:56:87:06:e2:76:68:c9:1b:17:
                    4d:3d:20:98:d3:2e:45:da:80:cd:d9:4a:3c:b7:41:
                    46:02:85:c7:07:b4:73:15:f0:33:6f:be:da:c0:b5:
                    87:e6:5f:f6:f3:0a:87:c3:69:8f:93:76:80:f3:a0:
                    80:38:1a:a2:d5:03:d8:37:20:d4:1d:fa:51:28:a5:
                    94:c5:64:1f:6c:20:fd:fd:be:66:87:d1:c9:2b:22:
                    36:9c:f4:d4:a2:6d:57:51:8a:57:2e:e0:a6:c6:5c:
                    82:52:7b:ca:fc:18:7e:2f:4a:62:5f:f2:c6:52:8e:
                    11:11:92:51:ec:ea:90:25:78:29:07:69:ab:75:86:
                    83:d4:57:c3:50:e9:5f:49:c6:15:14:e7:6a:9a:e1:
                    89:60:5f:e5:ac:61:42:33:db:27:d6:51:45:da:a7:
                    ba:3a:58:23:5c:a3:7d:9a:35:46:ae:f5:b9:03:93:
                    1d:76:dd:de:3b:08:06:5f:30:88:d8:7d:3f:05:e2:
                    c9:6c:01:df:25:1f:6e:ec:ce:ee:3e:3e:95:0e:f5:
                    f3:4e:2a:da:5d:13:49:49:50:89:44:00:4b:91:3a:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:56:E0:74:B4:31:77:25:3F:7D:3E:B5:F2:12:AC:72:32:B8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:d6:e8:b8:95:4c:d5:b5:32:7f:8d:15:af:96:a1:2e:7f:
         57:50:d9:9e:31:2a:9f:a1:07:63:07:f4:6a:45:6d:b3:1f:dd:
         88:21:00:77:e1:8e:b4:57:bd:20:7a:df:e4:11:c7:ae:73:6c:
         ef:c9:78:df:0c:87:2d:40:16:a2:50:e8:04:e5:4c:98:31:df:
         e1:96:e6:20:4c:49:7e:8f:aa:cc:3c:e6:c0:2d:f6:34:34:c7:
         ca:86:25:00:e4:10:21:a9:4f:5a:fb:45:d5:62:45:27:ae:0f:
         32:f9:13:10:73:27:38:fc:a2:40:d0:ae:47:8e:dc:78:ec:df:
         f9:1d:3a:bd:d4:0e:ed:03:0d:3c:4c:c0:15:34:4a:de:08:4e:
         09:81:9a:13:37:95:29:d4:64:91:8a:2a:6b:db:71:df:5d:72:
         f9:53:02:bf:5f:dd:9d:f7:3f:7d:1d:e4:83:c0:3e:bb:52:fd:
         49:9e:1a:3c:23:4a:16:47:c2:83:bf:58:01:ae:25:09:33:88:
         35:4f:73:d7:4b:93:53:43:60:00:d7:ee:fa:db:d0:fa:5e:b8:
         9e:6c:3d:20:ce:eb:08:e5:e0:2d:30:5f:3c:da:b7:82:92:61:
         47:49:20:b4:6e:cb:c8:5e:b8:48:27:67:0c:0d:75:51:ff:c4:
         8d:5c:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:11:26 2024 by rpki-client on console-ams.rpki-client.org