Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa
File:                     a38aeab0-66f0-37a8-9814-f482b29972b2.roa (raw, json)
Hash identifier:          olhPaCixCvpCOyGTcBaHzspu2045/03q3SYqohi0zC0=
Subject key identifier:   8C:00:26:1B:43:E9:F2:6A:A2:EF:1A:AA:29:30:E7:D2:AF:C9:E1:58
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F43285844F35865EBAC54EE5E34172C40
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa
Signing time:             Tue 20 Feb 2024 04:58:41 +0000
ROA not before:           Tue 20 Feb 2024 04:58:41 +0000
ROA not after:            Mon 20 May 2024 03:58:41 +0000
asID:                     7018
IP address blocks:        170.205.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f3:58:65:eb:ac:54:ee:5e:34:17:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Feb 20 04:58:41 2024 GMT
            Not After : May 20 03:58:41 2024 GMT
        Subject: CN=daa396e6-8ca1-4d7e-99b3-40782898bc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:24:1c:62:c9:30:a1:b6:7e:0e:22:5b:fc:
                    4c:3c:9a:ec:f3:f6:e4:41:40:de:b6:c8:69:52:50:
                    b0:3c:d9:37:5c:f8:2b:e4:1f:94:e8:b7:1e:e3:48:
                    cb:a1:d5:b5:8f:9c:86:ba:aa:ee:a2:6f:fe:70:9c:
                    dc:3c:fc:70:10:8e:f9:c4:b8:36:af:9a:b9:10:c2:
                    e6:8f:72:f0:6c:f9:cd:3e:8d:74:89:91:74:b5:a6:
                    d1:5c:13:44:5b:ee:93:38:34:9a:80:4c:ec:74:e8:
                    18:79:cd:fc:9a:e9:fb:f5:dc:22:3c:22:09:ba:3f:
                    25:29:d7:cc:29:8f:66:7c:63:35:d8:2f:90:e2:63:
                    53:d4:8f:31:da:27:45:fa:b3:83:b5:a7:c0:85:5a:
                    08:e4:34:54:ec:f5:45:72:f1:b9:43:4c:14:c0:09:
                    a4:6b:c1:8f:db:f5:ca:c7:ee:63:72:51:07:9f:bd:
                    dd:6e:0a:76:94:cc:2d:d4:c4:40:1d:ba:d6:02:00:
                    8b:b0:66:6a:9d:e2:b3:07:ba:e7:4e:bc:fc:94:97:
                    96:0b:56:c6:bc:28:fc:75:97:f9:72:84:7b:ad:56:
                    a7:c2:f5:ac:30:18:e4:ec:0b:bf:60:9b:5a:49:c2:
                    dc:45:9a:bf:2b:80:02:b1:63:e6:9f:84:76:6b:c6:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:26:1B:43:E9:F2:6A:A2:EF:1A:AA:29:30:E7:D2:AF:C9:E1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:08:99:07:72:6f:5e:7e:cf:bc:08:8f:0e:cb:37:28:6e:74:
         7d:56:cd:15:2b:4d:83:2c:58:8c:21:c0:bf:78:b2:74:90:91:
         3a:ca:0d:0d:c7:1c:3c:89:63:53:da:c1:b4:4a:a8:4e:bd:18:
         cc:bb:15:c4:db:95:06:cf:1a:33:c2:b2:3f:84:23:fe:c0:bb:
         6a:48:07:00:5a:36:24:cd:fd:8d:98:32:e8:39:9f:64:be:9d:
         20:7e:a2:48:23:06:e5:a1:50:89:c9:0a:3d:c6:a2:3f:f9:b5:
         d7:0c:19:40:b8:53:a8:d4:19:00:a8:65:72:96:3c:04:e1:a8:
         d1:51:df:7b:e6:03:58:cd:38:e3:b2:1f:8a:ac:3d:92:b5:63:
         5b:e5:95:7c:94:46:b2:5d:e3:ba:b1:2f:b2:bf:b1:b7:49:bc:
         e9:70:28:ec:fa:73:86:49:93:a6:36:7c:2c:d2:c7:aa:0b:42:
         fb:07:2f:fb:2f:fd:fe:61:13:73:b9:1e:00:03:8d:91:7d:b3:
         1e:b9:91:4f:75:26:c3:2b:f6:5a:31:db:47:a6:57:c5:a2:de:
         27:82:99:b3:19:77:6b:5b:bb:50:67:5c:7d:51:44:d2:ad:41:
         51:c6:e4:67:d4:36:74:8a:62:c2:db:72:39:8b:f4:1e:5a:f1:
         1f:f1:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:00 2024 by rpki-client on console-fra.rpki-client.org