Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
File:                     74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa (raw, json)
Hash identifier:          ZQECHWJb6HYv1BfxMmelNEU4AtXIMchufDEG6mxhKhA=
Subject key identifier:   1E:D9:F2:19:BF:CE:55:CC:40:ED:06:93:7E:57:F6:75:21:E9:51:D2
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858453317EB785B2F3532748F2A00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     198949
IP address blocks:        198.135.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:eb:78:5b:2f:35:32:74:8f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=64136858-2d9c-4501-b48e-2eea768c5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:6f:a5:5a:92:4f:68:83:22:a8:2b:02:a4:
                    6b:3f:ec:a4:e2:25:e2:11:85:b1:22:8c:68:34:4f:
                    6f:77:11:90:cd:ad:d6:eb:16:7a:c6:2a:34:e0:91:
                    2e:61:6d:da:65:95:04:d8:cd:22:35:32:10:28:e0:
                    79:d5:ee:47:fd:9b:bc:d5:a5:c5:c6:49:37:db:ae:
                    8d:af:d4:c9:cf:db:d4:21:db:ae:92:35:10:d4:82:
                    1b:1a:74:79:c0:ae:97:3c:1a:17:35:27:92:22:f9:
                    09:4f:d2:f8:46:b8:c8:b8:cc:19:b7:ff:51:81:c0:
                    dc:4b:14:97:f5:91:57:54:e1:4c:10:6f:2b:e3:ac:
                    2d:d1:ee:2b:67:5d:0c:e4:54:da:d5:9f:2b:a5:25:
                    03:97:46:bb:09:93:25:46:c5:62:8a:47:f8:3c:87:
                    52:21:dc:2b:20:7d:0e:55:7b:07:78:97:a0:6e:66:
                    e3:05:f5:da:04:65:1d:ef:3c:78:ff:c0:0f:83:cb:
                    f7:21:59:b1:84:aa:bc:ab:6e:d0:0e:6b:cf:6b:fb:
                    53:b5:85:82:ac:9e:c7:70:51:8f:a8:bb:0e:f5:8b:
                    a1:b6:c0:dc:bc:12:f9:2f:59:22:75:17:ca:ab:4e:
                    fa:00:7b:22:90:b8:d0:d5:d3:17:15:ec:b8:36:60:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D9:F2:19:BF:CE:55:CC:40:ED:06:93:7E:57:F6:75:21:E9:51:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:96:5f:dd:8f:c4:7e:fc:97:65:8d:3c:8d:36:5d:fb:67:88:
         d5:49:f6:b1:59:35:ae:e9:19:3e:19:74:91:52:c3:0d:c6:ef:
         09:41:00:19:90:34:f6:d2:97:b2:b1:8e:3f:a5:3c:f2:59:5f:
         bd:26:5e:ac:49:08:d2:10:1a:b2:81:6e:21:2b:ec:15:39:5f:
         f6:2a:8b:06:4b:c1:bd:03:e0:f6:d1:19:91:70:75:bc:3a:37:
         2c:a0:1b:cb:d3:ca:f6:85:96:17:55:c0:7c:73:2a:7e:00:be:
         ca:0d:3b:7b:2b:aa:80:ea:8f:d1:32:94:9c:0e:2f:e4:a6:0b:
         9b:4a:a6:26:5e:83:ee:53:d1:07:fe:11:7c:60:17:f6:06:55:
         51:8d:7f:9f:ef:d5:9e:e4:93:f9:82:1c:54:f0:f0:45:11:b2:
         33:cd:a5:d8:72:59:69:24:ba:f9:57:55:a5:2c:da:44:14:49:
         4f:d7:01:01:ce:01:16:82:8c:8f:2a:1a:7d:85:f6:72:64:79:
         21:5a:f8:b9:b2:d9:d1:89:4b:87:8d:3c:16:cd:69:d7:7c:07:
         23:54:39:fe:bf:13:c7:d2:9d:57:5e:7b:6e:c0:f8:21:02:4e:
         0d:2f:73:fb:84:9c:e2:5a:3c:b8:59:e9:63:a3:65:fe:55:aa:
         20:ff:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:12:57 2024 by rpki-client on console-fra.rpki-client.org