Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa
File:                     b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa (raw, json)
Hash identifier:          ppe6JJz6Ctv21dA5QLmzv1X004kPaMeD5wmz8OqdRa8=
Subject key identifier:   6D:B6:38:E8:C5:9E:CE:03:07:A9:3D:7D:03:30:7A:90:56:08:2B:2F
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858453A12AB0611FB997C8F733B80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     11090
IP address blocks:        185.30.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ab:06:11:fb:99:7c:8f:73:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=84ce788c-af92-4010-97ec-dc017e1eeaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:1e:04:ec:14:ee:b7:09:79:bd:1e:bd:d9:
                    f1:1d:b2:af:6e:39:b7:d7:fb:3c:0e:b2:d9:d5:3c:
                    33:68:87:c0:1a:a5:0b:6e:3e:95:f8:8e:bb:ea:c7:
                    21:a9:3d:e4:4d:a8:5d:a8:d9:c0:ad:3f:98:18:a4:
                    7c:85:59:b7:bc:48:bb:0f:3d:62:e0:05:4b:77:de:
                    d5:89:8b:dd:f3:08:bf:b6:3a:5c:30:78:be:b9:d0:
                    be:c4:fb:23:61:3c:24:45:d7:9b:2f:7e:48:18:44:
                    ef:06:0d:a1:a2:46:d3:12:31:0d:eb:dd:ef:ae:d2:
                    1a:b2:bd:a6:a5:d3:5b:b5:c4:b2:9c:e7:f2:d0:b0:
                    95:cf:51:5d:a8:5a:9b:80:17:d5:61:33:ed:c3:64:
                    e3:dd:03:a5:b4:00:1c:73:67:57:96:96:a4:85:9c:
                    b3:1a:13:b2:11:1f:a6:8e:ba:1a:f4:8a:20:52:6e:
                    3d:0d:b6:4e:3d:b2:38:0b:59:2a:a0:cb:26:00:ef:
                    60:e5:6f:ec:f0:9b:7b:a2:8b:01:7e:e0:b8:28:73:
                    6c:da:ac:6c:83:7b:58:b2:37:ab:f2:20:cb:51:93:
                    47:4a:40:e1:50:b7:a8:39:d1:e5:3f:26:c8:88:df:
                    6b:2f:b0:84:ff:bd:cd:14:61:13:d0:ff:fd:4c:6a:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:38:E8:C5:9E:CE:03:07:A9:3D:7D:03:30:7A:90:56:08:2B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:86:a1:22:69:86:75:37:a1:d2:fb:0c:d1:9d:3b:91:c2:
         47:36:04:60:66:ae:9b:2b:a9:c8:68:6d:94:bd:d3:b2:af:b4:
         fb:e1:ea:9e:fe:89:74:d2:a7:aa:bc:ec:8f:27:29:5e:e7:0c:
         3a:87:0e:56:b8:19:65:fa:5c:cf:80:74:fc:91:ce:88:80:0e:
         76:ad:da:fb:7a:5b:33:43:17:ad:09:ec:7b:2b:af:9c:30:09:
         17:0f:e7:ea:b0:67:50:50:f0:62:63:8a:90:ad:24:d9:47:e7:
         c6:2f:46:32:18:db:ce:ec:3b:e5:87:ec:a2:d2:1c:a7:67:f4:
         ca:5e:76:b5:f1:0a:e4:eb:6e:46:e0:9c:ff:79:4d:70:cb:bf:
         2a:79:f3:bf:59:f7:e5:be:09:37:b8:90:d2:df:c1:99:49:9a:
         01:9d:04:94:22:44:b8:b4:3d:c6:51:56:b8:a7:08:2c:1b:74:
         ac:8d:ab:9c:8d:41:ad:20:d8:cd:9e:75:21:66:47:6f:1e:f1:
         e4:74:99:a4:6c:00:3a:1b:77:77:74:a7:59:58:96:f6:fa:12:
         3e:68:20:ef:18:d6:30:c0:94:b2:18:80:50:ee:0b:06:d9:5e:
         68:97:ad:e6:ad:56:2b:77:a4:ff:9c:f0:04:84:7a:ce:8f:43:
         ca:e4:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:03 2024 by rpki-client on console-ams.rpki-client.org