Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa
File:                     0542afe5-57db-3a2a-bed9-df34a11aec43.roa (raw, json)
Hash identifier:          RZDCwQJ9jU3v+YrzRBwXObwJT1vqO/6kogzMlwcLWU0=
Subject key identifier:   1D:32:E2:09:4D:1D:83:E5:84:A3:27:FF:14:25:D4:DC:C6:7E:A8:E2
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F432858467E9DDECE03589FCA628C9480
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa
Signing time:             Wed 10 Jul 2024 19:02:57 +0000
ROA not before:           Wed 10 Jul 2024 19:02:57 +0000
ROA not after:            Tue 08 Oct 2024 19:02:57 +0000
asID:                     11052
IP address blocks:        199.190.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:9d:de:ce:03:58:9f:ca:62:8c:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jul 10 19:02:57 2024 GMT
            Not After : Oct  8 19:02:57 2024 GMT
        Subject: CN=9a7a9af2-4fc7-4f97-8e96-d1799d4fbede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:ff:84:10:aa:9f:47:53:a1:9a:e0:08:b5:
                    76:44:3f:69:cd:54:74:7b:d0:6c:a6:f5:bd:31:9a:
                    f0:3d:6c:1c:7c:c9:6d:38:e4:13:65:5b:37:c0:35:
                    e1:5c:69:44:f5:65:66:3b:fa:20:04:d8:29:bf:8e:
                    db:71:50:20:a0:2b:49:12:28:5a:26:a6:6a:43:6e:
                    00:75:71:db:e1:71:4b:de:a9:8c:68:06:9f:db:dc:
                    73:99:6c:55:46:bb:49:fc:a5:bd:5b:17:78:b7:e9:
                    d7:f4:36:ac:fc:2f:e7:30:ed:c4:7b:9a:da:81:c6:
                    d9:9f:62:24:8f:00:28:79:1c:76:d9:78:69:b2:f1:
                    c1:ac:65:33:38:35:61:e5:3a:a8:74:b6:8d:73:a2:
                    80:8c:8e:24:b1:34:e8:41:6c:49:cd:ff:d2:c8:28:
                    9e:e5:34:4a:41:3d:8b:0b:7b:a4:6f:69:18:08:59:
                    fd:2c:00:6e:3b:1d:cf:53:ec:bd:79:39:e8:c2:d7:
                    92:fa:50:ed:67:3b:c1:b4:25:7f:93:4f:ff:19:b6:
                    e6:11:b9:2e:1e:26:d5:cb:9f:60:cf:b6:7c:e8:2f:
                    67:31:62:19:b7:40:90:99:de:9b:6f:3b:41:89:a6:
                    1e:3d:65:63:5d:4a:04:13:58:c7:6d:7a:1a:1f:f5:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:E2:09:4D:1D:83:E5:84:A3:27:FF:14:25:D4:DC:C6:7E:A8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3b:00:1f:64:d7:f4:72:b1:3e:e4:d3:15:79:4d:03:f2:37:
         cb:7e:9f:e9:b8:06:6d:8d:74:11:5c:75:c9:27:b7:97:a6:98:
         f2:20:17:ee:a3:cb:f1:a8:c9:e2:3c:81:33:92:44:6f:69:6a:
         30:c8:60:3f:5c:c5:3b:ed:b3:ff:c3:7d:cb:0b:6c:72:cc:9f:
         94:c9:75:0e:18:d4:03:ff:31:70:09:5c:b9:94:ab:d6:a7:f3:
         f3:59:b4:29:83:0e:d5:4f:9a:6f:0e:3b:9e:c0:91:99:5c:52:
         f0:14:90:14:7c:23:a2:e7:71:f3:28:cd:ee:b7:18:f6:7c:89:
         03:f5:ad:6d:4e:8f:1f:9c:ed:da:55:c9:b5:ed:a8:cd:44:e3:
         23:28:c7:2d:af:f0:c2:0a:a1:fa:c9:8a:e4:1a:51:b0:98:5c:
         54:44:a4:a3:80:57:4d:01:7f:bb:13:5c:c2:df:16:e6:69:54:
         af:c0:49:b3:fa:75:d9:5e:ef:b2:d5:df:a3:70:33:4b:35:1c:
         be:c2:f6:28:0c:25:eb:61:3b:34:b0:44:b8:35:7b:b8:ef:ee:
         50:d7:33:cc:44:ad:74:13:29:1c:47:f5:3a:9e:0e:45:51:de:
         70:af:6a:db:4c:6e:47:7d:6d:58:27:6a:83:ba:30:8e:19:fe:
         96:1d:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:03:44 2024 by rpki-client on console-ams.rpki-client.org