Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa
File:                     1913c0c7-dc83-342e-a0d2-774b8807756b.roa (raw, json)
Hash identifier:          NoOJf8u7sPKEhe2cGnW3y+hOAk6I27ZC/y9BvsdWs/Q=
Subject key identifier:   9B:F9:6E:1D:A0:4E:9E:20:BD:D2:30:BE:99:9A:69:46:24:6F:3B:43
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455762CDCBE5B582F442633280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     55246
IP address blocks:        209.237.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cd:cb:e5:b5:82:f4:42:63:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=450be18a-0ab1-4a52-8dce-bb02bbf404f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:0e:a7:75:b1:35:35:e2:02:1b:8c:5e:e2:
                    f2:c4:5c:5e:a5:83:59:c6:9f:e9:4b:05:ea:c8:3b:
                    f2:11:12:db:44:78:9e:0d:dd:c0:9e:73:f1:22:e7:
                    84:1e:cf:15:0a:2c:34:b9:b9:24:46:7a:d8:c4:22:
                    5b:dc:8a:55:c6:8a:68:d0:22:25:f1:fb:c6:b5:51:
                    8f:f0:45:36:ba:11:f3:9f:6f:77:52:82:34:4f:0c:
                    79:81:55:bb:ae:67:7d:9b:96:44:86:14:59:4a:fa:
                    73:3c:60:fa:7b:a3:f7:22:96:6e:e9:fd:7c:32:c6:
                    a1:00:8e:72:1d:37:25:bd:55:53:1d:c8:eb:42:39:
                    d9:e9:68:43:35:11:74:51:59:43:37:7e:96:20:c3:
                    47:10:d6:d9:49:4a:be:bf:58:45:b9:aa:eb:ea:ab:
                    3e:bf:aa:0e:89:17:4d:7c:df:19:df:a6:41:d8:41:
                    70:7d:de:03:f0:9e:46:ac:00:33:4a:46:3c:4c:a6:
                    a4:04:9c:f6:64:c3:66:c6:0a:f3:61:75:2d:6e:1b:
                    f2:66:07:82:0a:fa:6a:d6:20:d7:e0:5e:b1:8d:1c:
                    ae:ba:5f:83:33:08:1e:cf:52:a1:fa:c5:2a:43:f5:
                    31:69:e5:1c:fe:5e:08:c9:c5:1b:39:a2:de:fb:96:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:6E:1D:A0:4E:9E:20:BD:D2:30:BE:99:9A:69:46:24:6F:3B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:54:ec:8e:bd:de:ae:b1:2a:de:33:71:93:e6:01:10:d3:68:
         4e:19:61:e4:be:4e:62:b7:14:c6:75:3b:c1:d1:47:22:45:5e:
         c6:dd:6e:82:3b:03:c0:02:c1:a8:0a:f0:27:4f:ec:57:4d:da:
         f9:80:e1:be:01:e6:29:1c:bc:2a:4f:f1:f0:32:88:35:6b:03:
         36:41:48:07:02:83:eb:78:85:4f:dc:43:9f:a3:18:8c:e4:7c:
         7b:7f:5a:e9:72:52:68:d5:1a:5d:ff:8f:a6:77:e4:61:e4:10:
         df:76:8b:64:7e:35:98:0a:1e:8c:18:0c:5e:74:9d:8d:52:56:
         12:e1:83:1c:2f:bc:d7:76:1c:e2:98:2f:78:9e:8f:cf:7a:e6:
         08:a6:83:3b:b1:72:2c:d0:c9:0b:11:b0:00:57:ee:ad:49:b5:
         04:1e:60:49:b4:41:43:69:41:43:f4:8e:78:8e:d8:fb:61:2f:
         a7:26:2e:db:37:c0:c7:88:86:cf:da:09:bb:e2:9c:b7:56:98:
         79:24:d2:d2:1f:e7:cb:19:ec:d3:8e:9b:cb:e1:2f:94:33:a4:
         a9:b4:b2:43:c1:88:fe:b4:bc:b4:13:a6:9b:71:ed:43:87:b4:
         84:6b:ff:50:15:71:d3:80:73:f3:8e:a7:63:20:7e:27:d1:fa:
         be:cc:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org