Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
File:                     238aa101-b943-3077-86c9-57b2750b798f.roa (raw, json)
Hash identifier:          If4ngri9IYAgfeUzhu6p6AC1Ac5TzkhgFjwtxH0kp+U=
Subject key identifier:   67:F0:70:F3:2A:4F:43:05:0D:03:EA:C8:FE:5F:85:58:F6:D2:CA:01
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584578E30AA308EEEA843D9B9A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     63296
IP address blocks:        208.185.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:0a:a3:08:ee:ea:84:3d:9b:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=d17a303d-f977-443e-a5d3-f1b441b221dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:e4:a1:d1:1b:c3:6f:de:ad:28:63:57:61:
                    fd:2c:3e:ee:9f:e6:98:81:48:d2:e2:ee:01:a2:ac:
                    20:f8:7c:52:67:b3:e5:c0:f3:fe:20:77:20:11:90:
                    e4:c3:32:5b:71:63:ee:93:91:c2:3e:b1:a7:93:8a:
                    38:df:ff:d8:85:72:c3:13:eb:18:d3:c2:3a:e8:c1:
                    5e:cc:4e:df:42:ed:30:8a:8e:a8:15:a8:f8:61:b7:
                    3c:39:3b:45:83:62:3e:d1:14:5f:80:97:53:a8:c3:
                    92:ac:34:69:64:26:7a:4f:36:b3:ea:57:2d:e6:a4:
                    9a:e3:d3:20:66:fa:d7:08:09:a8:81:94:35:8d:21:
                    eb:18:11:0b:e1:c3:49:07:7b:fb:4f:38:90:4a:e9:
                    17:fa:ce:4e:1b:7a:5d:c9:c6:b1:66:83:65:61:87:
                    9b:64:5e:aa:e1:5e:6b:da:60:a2:2e:42:c0:0b:a7:
                    40:1a:71:80:af:cc:9e:48:03:96:80:b3:3a:3b:18:
                    ce:24:34:b6:74:fc:09:c4:0b:01:df:19:a8:e5:93:
                    9b:6f:68:14:a6:7d:e9:bf:d5:ac:5a:fb:a7:bd:d2:
                    0e:c3:e2:40:e2:53:80:67:64:67:ce:9a:b4:dd:b1:
                    d1:cb:ff:d3:5c:0b:55:e2:a6:3d:45:7e:11:0c:74:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:70:F3:2A:4F:43:05:0D:03:EA:C8:FE:5F:85:58:F6:D2:CA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:15:8d:41:58:4a:61:a5:43:9a:5d:31:8b:db:14:d2:c3:
         68:6c:a5:83:4d:ff:83:a1:f5:49:f4:5f:87:59:cc:b3:c7:18:
         bb:44:2a:a5:26:f7:bb:47:8e:ba:7d:64:59:b9:ea:88:80:e1:
         1a:51:21:5f:81:66:b3:94:12:0d:51:d9:47:17:65:c8:33:c1:
         0f:7e:3c:94:04:c9:44:d5:2f:2d:a1:ec:b4:2a:e9:fe:ec:c0:
         33:a9:6c:1d:0f:49:8a:89:62:0c:72:34:ea:38:56:7a:8e:3c:
         6c:a5:24:86:f3:03:5f:d4:0d:69:1b:d3:95:2f:5f:de:11:d6:
         95:0b:0c:28:83:31:47:40:86:60:5e:17:85:72:c0:cc:d3:e3:
         fc:6f:49:66:e1:02:cd:f4:2c:b3:0d:8a:1f:17:cf:09:c9:27:
         1b:7a:7f:36:a3:be:cf:c7:5e:47:44:61:d8:37:95:43:a3:a2:
         5c:ba:bf:2d:2f:a5:41:1b:fe:19:3d:15:e8:7a:8d:66:a9:a7:
         1d:c7:0a:5c:bb:66:69:64:6b:9e:9c:86:1c:55:97:f9:8f:7c:
         4e:3f:66:dd:59:f4:f3:84:65:be:1d:9a:18:e2:66:20:4c:72:
         cd:fe:ad:17:9b:6d:ac:4f:a8:07:37:af:94:d2:68:30:31:fb:
         08:a1:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org