Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
File:                     df094277-d2bc-383c-bec8-1ab56e3af9ef.roa (raw, json)
Hash identifier:          RFX31LMdnLVGJ6YdHpFoRfHZhRTdf1Em5qYQzbz+K80=
Subject key identifier:   BC:07:CE:64:76:C6:46:4D:52:8E:9B:16:8C:F0:08:AB:FA:CA:F8:61
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858457A487E6A03E74B78C80C9080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     25899
IP address blocks:        206.192.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7e:6a:03:e7:4b:78:c8:0c:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=c81f96f7-9c33-4541-ba3e-bc0be304b732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:74:c5:dd:21:dd:a0:b0:de:30:a6:90:03:
                    04:55:17:19:83:be:e9:fc:d1:e0:36:17:af:33:23:
                    7a:3a:dc:b3:5f:4f:93:81:69:6d:c2:e9:20:67:32:
                    fb:d2:e7:97:c8:0d:23:f6:48:89:ae:fc:3d:7d:06:
                    44:ca:8b:c0:5b:42:65:3b:04:a9:06:1a:58:65:a5:
                    93:f7:f9:c0:05:f6:37:ff:12:e3:74:b2:97:fb:a2:
                    a5:6a:39:dc:ba:ca:b8:b5:67:56:41:7f:33:f5:97:
                    eb:02:f0:86:7f:ea:a6:76:ff:6a:37:35:c8:a7:a1:
                    38:b3:b7:86:a3:7b:78:32:43:b2:f1:03:83:99:51:
                    55:12:e0:9c:f2:74:05:45:01:35:99:3b:5a:63:f7:
                    66:1f:a0:df:8b:8e:fc:c3:ba:0d:89:37:5b:e7:c0:
                    25:2f:3d:8e:72:4e:4e:8e:5d:8e:1b:e5:72:0a:6b:
                    e1:1d:83:7c:68:d2:c5:1c:bb:7e:34:1b:1d:d1:3a:
                    48:e7:ff:b5:99:15:df:31:22:84:03:1b:e5:b3:ba:
                    01:45:c9:f1:f8:6b:38:a9:8d:91:e9:a9:8f:d3:33:
                    a5:c9:ea:4d:d1:e7:5e:d4:32:9c:1d:b1:2a:97:4b:
                    a5:a1:85:ab:2d:b1:11:d7:f0:4e:c5:ad:74:fe:4e:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:07:CE:64:76:C6:46:4D:52:8E:9B:16:8C:F0:08:AB:FA:CA:F8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:16:7b:d8:32:62:ba:c9:e1:67:ad:9a:5d:58:12:6d:30:36:
         07:ad:0f:3e:ac:22:4d:4f:52:8c:08:dd:49:a7:d4:61:6d:db:
         c9:6f:d5:9c:36:04:1d:b8:cd:df:46:2f:54:0c:19:44:cb:fa:
         cc:1e:ea:d5:76:64:60:f1:3c:d7:ec:b4:d4:8e:ff:7e:26:05:
         e2:ad:e4:e8:ff:d4:86:70:cf:90:e8:e6:8d:0d:d4:2a:bb:fe:
         66:7b:53:5b:17:ee:1c:64:a6:da:96:03:3b:72:46:d9:9e:94:
         5d:88:cc:2d:5c:d6:fd:95:1b:2e:82:33:cd:74:62:69:54:e0:
         43:9b:18:db:4b:c4:76:f4:15:80:39:1c:f2:62:1d:a4:ec:7d:
         66:05:e5:ac:65:66:1f:1c:68:69:30:6c:76:c0:e6:3c:d7:d2:
         a5:54:f4:c5:05:11:a1:56:58:68:34:9b:3c:47:1b:31:d6:0f:
         50:dc:e1:26:73:9a:c9:7a:0b:4a:4e:3c:d3:fb:c7:a5:a2:41:
         29:ec:e7:1b:bd:1a:25:c8:3f:c4:be:cc:e0:db:61:68:69:a7:
         b3:02:62:d7:75:9a:4b:f0:97:a4:c7:f3:0b:74:b7:72:c9:63:
         10:15:32:dc:ec:8f:46:71:7f:65:e8:43:73:8b:76:9d:30:e9:
         07:24:70:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:22 2024 by rpki-client on console-ams.rpki-client.org