Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
File:                     7fd5bf91-228e-3672-967b-c25d825ce3ff.roa (raw, json)
Hash identifier:          Ivdeou4JSxLkKpkw880OOxYcfR4o8Bdp8l2+9e7s4g8=
Subject key identifier:   56:6F:EE:49:9F:51:D1:5A:27:45:42:EC:83:2E:19:D3:F6:2B:05:FA
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584586D8777E1DB9FDCFD72B8480
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     55015
IP address blocks:        209.183.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:77:7e:1d:b9:fd:cf:d7:2b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=3c7a83f0-a6ce-4f29-bf4b-193dae0521c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:c3:07:a0:90:5b:8e:f4:5a:54:cf:68:d5:
                    f5:1a:4a:b3:51:4b:26:41:ea:25:b1:ee:84:07:04:
                    a1:b0:de:e0:59:0d:05:2d:3f:bb:67:2f:82:fc:d5:
                    fb:8c:31:8d:7f:12:42:8e:a3:f9:d0:ca:d0:9c:b3:
                    e4:a0:3d:21:38:71:80:8b:20:ad:a5:35:f8:c1:2d:
                    a2:bb:28:5e:f3:da:af:d3:85:4b:58:8a:87:95:e6:
                    18:62:a1:b8:1a:fb:30:5d:98:0a:67:d8:b8:b2:a1:
                    85:aa:33:2a:3c:a7:ad:22:9c:11:5d:0a:6e:c1:e3:
                    36:ef:25:a9:1d:88:aa:30:a0:ad:ec:8b:76:5d:67:
                    e1:fc:2d:3e:36:84:4a:1a:54:a0:97:d3:bf:41:81:
                    22:f6:88:20:16:22:30:58:58:95:a2:94:58:d9:5b:
                    95:1d:05:29:4e:da:25:a9:79:8b:e7:6c:e6:ef:c4:
                    64:9c:2f:70:3c:aa:f9:85:f6:ec:4a:23:40:9a:d2:
                    0d:b4:8f:1a:14:30:15:59:53:2a:a5:41:41:a4:fb:
                    18:aa:93:e8:ad:94:7d:6a:47:e8:8c:94:1a:c1:4e:
                    32:86:41:e2:1a:90:0d:a4:e3:16:c2:a8:2c:56:1a:
                    c4:ef:2a:d5:92:8c:0e:65:04:b6:4e:75:ce:49:f6:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6F:EE:49:9F:51:D1:5A:27:45:42:EC:83:2E:19:D3:F6:2B:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.183.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:21:8f:f1:47:f9:7c:11:c5:4f:ae:c9:31:f0:5e:9f:3e:
         00:ad:22:63:d9:36:76:b1:e0:fb:ee:fb:47:0a:22:17:1c:9f:
         d3:6a:e4:da:c6:eb:7d:86:a2:33:1b:56:9e:aa:1a:e7:ee:a9:
         f4:0c:28:a5:18:ed:67:ef:53:c3:1b:cb:42:8c:fb:2e:c0:0c:
         e6:a8:9c:5f:f7:89:ea:a7:e8:13:4b:a4:94:63:f0:4d:8c:0a:
         40:b8:f1:f6:6e:6f:42:c7:c6:b1:66:38:0d:86:8f:e3:02:23:
         fd:fb:12:c5:01:fd:bf:e1:d1:fe:b3:5a:ab:05:f5:88:e2:9a:
         46:2a:0a:19:9b:cc:39:13:6c:c8:7d:25:70:41:0c:51:a3:79:
         a0:d8:82:63:f1:60:cb:02:b1:a9:59:48:ae:26:d0:e5:c3:64:
         27:5e:11:7d:d6:eb:1f:3f:5a:08:65:06:9f:ee:b4:fe:b9:51:
         dc:94:a6:47:3c:46:4b:d3:4d:12:b2:13:f9:87:13:2f:4f:f6:
         fa:15:42:c7:3d:94:20:9c:77:92:32:cf:b5:8d:ac:b5:ca:d1:
         55:cd:f1:e3:16:d8:ca:6a:88:f1:5c:9e:00:00:4a:31:85:f5:
         f4:bc:32:8c:05:96:d9:9b:7e:87:99:af:0a:66:5a:46:71:f5:
         11:7e:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:20 2024 by rpki-client on console-ams.rpki-client.org