Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
File:                     c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa (raw, json)
Hash identifier:          XYR9P2RMQL/2YeEnAfpa2ocHNr9eou2LguD7v0bEK/4=
Subject key identifier:   E8:38:BF:CE:E5:7D:23:7D:D8:95:45:CA:F5:32:19:73:89:1A:A5:68
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584548081A14E3D6271D0E8232E0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        199.0.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1a:14:e3:d6:27:1d:0e:82:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=0bb5d46c-ca62-40ee-bf30-050aa8881519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:8c:c2:d6:5f:5a:f8:1e:00:c6:44:13:ae:
                    b9:d2:ab:68:05:0d:10:32:e6:88:5b:3e:ca:11:04:
                    e7:3e:a4:9b:64:0f:a1:7e:66:fc:f0:c3:86:5e:88:
                    5d:83:5e:a7:d4:c8:b0:15:88:75:60:6d:84:a6:fb:
                    a7:ce:8d:d4:d3:d9:25:3c:90:b4:4d:21:cc:2b:7e:
                    6b:7f:e4:52:14:5f:52:d8:4d:7c:bb:3f:90:63:0c:
                    16:63:d8:58:93:7f:03:24:2d:6d:2a:7e:13:9c:a2:
                    3a:26:db:c7:5a:31:41:90:d9:09:ad:ab:36:db:eb:
                    0b:d0:87:7b:4c:a7:7d:c0:f7:5b:c0:76:9f:85:af:
                    99:da:84:7e:42:b7:b1:c9:a8:c4:d7:55:fe:b7:a9:
                    d5:82:53:95:d0:6b:29:d2:05:11:36:3d:23:54:95:
                    63:f4:a1:7c:4f:39:06:38:60:f8:dc:79:21:79:3c:
                    a1:54:9d:b9:a8:ed:d3:a5:10:a9:dd:5c:8a:7b:34:
                    40:fe:66:71:71:88:0d:b2:8b:c3:dd:03:39:d0:f5:
                    20:b1:7b:8c:02:72:4f:ca:5f:f0:5b:4a:29:2a:d4:
                    78:6d:bb:9b:bf:50:61:eb:a3:50:90:26:1f:4c:c5:
                    0b:aa:aa:f3:b4:ce:dc:54:53:07:d0:aa:d9:87:d1:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:BF:CE:E5:7D:23:7D:D8:95:45:CA:F5:32:19:73:89:1A:A5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:82:b0:5c:29:91:98:d6:95:c7:b1:9d:f9:6e:c0:52:fb:12:
         84:ba:86:90:e9:22:f6:98:85:b5:81:39:84:c7:7b:be:be:6e:
         11:ae:b8:48:ae:b0:69:1a:66:6f:36:8d:7d:9b:0a:b4:aa:65:
         19:44:ad:3d:26:e6:1f:d3:da:3b:6b:95:ad:d1:39:aa:95:c7:
         92:a1:77:ec:a3:81:de:02:b5:8a:6d:78:22:b6:0e:97:f5:b3:
         ed:47:2d:58:0c:a1:93:04:44:2f:5a:77:3e:4a:01:a6:67:69:
         9d:7c:12:ac:50:a7:f6:63:a1:f0:93:b8:c6:4a:90:71:ce:8c:
         26:30:bd:86:df:8a:a8:a8:a8:83:35:51:12:87:f8:ea:f9:e0:
         87:de:cd:20:4c:36:a0:e0:56:04:65:84:6f:74:56:94:67:6d:
         6e:a4:80:e7:a0:d4:39:20:ce:c1:66:0b:f8:7e:20:1e:b9:80:
         1d:05:c1:8f:22:24:99:94:56:00:b4:26:a0:c6:83:ca:a4:1d:
         79:aa:e4:0a:20:59:ba:30:2c:ff:b7:3c:4a:72:ec:0e:e5:31:
         82:62:9f:d2:b5:2a:aa:0a:a8:06:87:0a:50:e3:37:e8:53:60:
         ea:0d:44:93:bd:3c:a6:eb:10:40:fe:a4:79:b7:03:d0:2d:07:
         7e:be:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:57 2024 by rpki-client on console-ams.rpki-client.org