Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa
File:                     d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa (raw, json)
Hash identifier:          5XLkf7peZ662pyZ4owL3kx+M8YPXYmRGEEKETEzEWoQ=
Subject key identifier:   59:CF:49:C2:A2:F5:75:97:C7:B2:72:05:07:23:A4:59:A5:4B:0A:3C
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF2EE312594DA15002844
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        207.245.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f2:ee:31:25:94:da:15:00:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=4e2048be-d914-42f7-b8bd-da7fee224ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:eb:82:ec:e8:60:8c:b7:85:45:4d:5f:df:
                    92:f2:cc:01:e8:ae:26:70:d4:1d:4c:c0:49:a1:a9:
                    a3:ee:90:11:ba:d1:f4:70:b7:9c:0f:e9:40:20:50:
                    d8:7f:36:ad:85:c3:6f:8e:97:cc:7f:9b:16:6d:82:
                    80:e6:cf:5a:fa:0c:1a:28:10:4d:8a:05:45:14:72:
                    2f:7c:8b:45:cb:f7:5a:88:0d:84:9d:7e:30:55:64:
                    f0:b7:a8:bb:e4:01:66:65:37:0c:16:24:f0:82:80:
                    b4:56:b2:f6:7d:5d:ee:cd:9d:12:6b:78:a6:98:c6:
                    21:f3:de:41:8e:99:eb:39:f5:3a:aa:e8:08:4e:6e:
                    49:11:1b:68:c2:7d:29:23:ae:39:60:43:0f:4c:ba:
                    22:4c:81:74:35:f7:7b:3a:6a:92:b1:10:2e:3c:35:
                    5d:e9:92:2f:6e:45:0e:b7:8c:a9:6b:ed:c2:9d:db:
                    ea:25:40:4e:78:9f:5e:f5:46:1f:e9:4b:05:f7:a7:
                    88:5c:8c:87:6b:33:ca:ce:66:c5:5d:54:76:0e:27:
                    61:a6:0c:75:44:82:7c:ad:ca:80:fe:72:2d:4a:f5:
                    e2:03:97:12:79:9a:fb:2f:b6:31:06:99:c7:de:1b:
                    94:48:c0:2d:54:89:58:02:8c:b9:34:43:5f:fa:c6:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:49:C2:A2:F5:75:97:C7:B2:72:05:07:23:A4:59:A5:4B:0A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:48:b4:57:0d:de:0a:23:0d:97:75:b4:62:0d:b9:dd:df:
         d9:55:96:60:01:e6:f6:0c:cc:44:2b:fc:0e:6d:48:7f:e6:ee:
         0a:7e:24:fa:9d:f9:0b:3a:43:18:e6:df:10:82:f6:b9:a7:29:
         56:fc:78:75:52:4f:8b:bc:1b:f6:86:8a:91:d9:aa:03:d7:15:
         86:f5:fe:55:e0:7f:bc:4e:64:4d:22:d5:08:c4:bd:23:13:5f:
         9b:ec:34:12:a4:7e:f2:fa:78:48:a9:94:c8:fb:90:e9:9d:c3:
         2b:14:c7:86:c6:4e:69:4e:4b:37:ea:90:fa:79:48:12:cb:dc:
         4c:fb:94:e3:3e:7d:47:08:f1:25:b5:67:a6:e5:25:3f:d8:83:
         37:9d:62:a9:13:0b:94:9c:74:e7:ff:89:da:39:6b:62:2f:88:
         5a:d0:d8:0f:23:b9:36:dd:4b:c0:37:4a:17:ce:ae:b8:c1:05:
         d3:e7:75:d7:8d:b1:63:69:61:4c:a3:62:0c:3f:3b:3a:c8:6c:
         c2:5c:19:45:0c:9c:2d:ff:cf:d0:ee:3e:b9:0f:9d:39:dc:f8:
         f1:b7:21:d8:75:87:b0:f6:0f:91:66:5e:27:18:00:4d:08:71:
         3d:7e:b2:df:39:81:7c:73:2f:7c:98:7b:94:98:08:44:07:2c:
         54:ac:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:11 2024 by rpki-client on console-ams.rpki-client.org