Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
File:                     e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa (raw, json)
Hash identifier:          mvg/pyboejLKHQ4mcAFPMgsbF3gohpSxWMUukJY+3A8=
Subject key identifier:   61:3D:6E:83:65:4A:07:55:EF:C3:65:8F:A2:C6:E4:17:13:12:36:CC
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F432858457A487B91FB6293CDABC8ED80
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     209242
IP address blocks:        209.46.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7b:91:fb:62:93:cd:ab:c8:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=6875d5b0-eedb-49b4-9438-c17557e9dd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:ce:65:90:ed:b7:90:70:c0:3d:9a:4e:cc:
                    12:2f:e7:20:b1:8a:ea:1f:08:45:5d:20:df:c3:b5:
                    43:08:5e:43:50:e0:42:c1:23:b0:ab:24:b4:ec:5a:
                    9d:16:a0:cc:82:e1:97:32:ff:73:b9:ee:16:34:7d:
                    d3:a8:7f:41:ae:f9:0a:4c:0c:bd:e0:40:66:e4:d1:
                    e2:ea:a3:a6:55:cb:2d:45:e9:cc:91:36:68:5b:36:
                    d5:ff:e2:6f:7d:ce:b8:29:69:0f:dc:70:d9:a8:d5:
                    f6:79:5e:14:e3:0e:4b:63:64:68:ed:00:ac:ae:92:
                    6d:b4:7d:32:e8:8d:95:9d:60:9e:04:cf:45:1a:de:
                    cf:ee:78:08:f5:f7:c2:8f:54:7b:b2:8c:54:8c:c2:
                    c6:25:48:1f:0a:71:77:56:93:54:4c:88:a6:73:54:
                    f7:d6:88:bc:bf:1c:96:a2:d4:e7:ce:10:7b:d2:34:
                    2c:1d:55:e3:c2:0e:df:9a:6b:2e:08:9d:91:23:f6:
                    21:b5:6a:ea:56:58:bd:71:d3:4b:10:f3:4a:39:2e:
                    b5:03:4b:7d:c4:5a:3f:f3:31:0c:e4:7a:80:31:64:
                    fa:4c:4b:34:89:8b:90:19:be:9a:ba:b1:af:96:b6:
                    73:34:0e:71:94:a5:07:c9:2b:06:31:dc:3b:ed:c3:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3D:6E:83:65:4A:07:55:EF:C3:65:8F:A2:C6:E4:17:13:12:36:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:36:c6:b7:33:bb:23:74:b7:dc:7e:d9:8e:43:77:11:6d:
         28:9f:fe:8e:71:d2:77:1f:da:9b:96:ba:88:0c:e6:e9:73:28:
         0c:88:8e:02:27:9b:ce:96:b9:7a:e0:4d:6c:95:62:46:53:03:
         bf:ae:0a:6e:12:58:22:56:4a:fa:77:73:55:5e:2f:a8:6f:50:
         41:f1:43:13:3d:32:0a:a9:04:0e:97:04:fb:63:37:7d:c1:74:
         4a:94:c8:de:45:9a:eb:cd:0f:ce:46:13:ea:fe:3b:ac:94:25:
         72:6c:62:41:79:25:19:9d:af:97:ae:44:ff:05:ff:25:74:d2:
         4e:94:59:5f:92:69:7d:5c:15:e4:40:f7:bf:52:6c:1d:68:56:
         43:00:10:5e:e6:9b:2b:b7:2d:77:a5:e9:4c:d9:18:29:4a:17:
         56:d4:ab:1d:6b:c2:ff:d9:54:22:19:93:95:13:f9:61:51:05:
         17:c4:78:04:a9:04:76:fd:9c:b2:16:61:0b:31:ae:ae:18:13:
         11:0f:58:94:ef:1d:f9:d0:c4:94:c6:5a:07:bb:0b:da:c8:0f:
         3d:a6:eb:42:bc:e6:39:42:6a:68:f5:b3:3c:2b:15:9d:64:f8:
         41:fe:63:b3:9e:89:bf:58:8d:e9:3e:b3:5f:1c:20:73:02:50:
         c1:10:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:54 2024 by rpki-client on console-fra.rpki-client.org