Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9be85794-7b12-3374-be4d-21e3dde963ef.roa
File:                     9be85794-7b12-3374-be4d-21e3dde963ef.roa (raw, json)
Hash identifier:          Epjybj6iFoA89G5nnzkA5uhhmnPkNISkJO8ujDGs+vE=
Subject key identifier:   B9:2D:5A:24:F1:9A:AA:69:C2:FB:18:FA:F8:49:C5:60:5D:12:9B:B1
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858459E934ED1C1484B07BEC20800
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9be85794-7b12-3374-be4d-21e3dde963ef.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     205676
IP address blocks:        107.155.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:4e:d1:c1:48:4b:07:be:c2:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=e9e3d661-212e-47d2-8333-c725be46c456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:4f:80:0b:90:05:77:cd:35:66:e4:17:75:
                    a7:f7:52:ec:46:ec:15:79:ac:01:78:f6:4a:14:77:
                    dc:a1:54:a6:aa:cc:da:b8:fe:91:b7:0a:df:a0:8a:
                    b5:6e:92:e2:21:46:09:62:57:d9:87:3a:84:cd:7b:
                    72:3f:d3:b2:cc:f5:d9:46:f9:f3:f6:73:4c:fb:10:
                    c1:6b:f8:f6:0e:b4:d5:62:06:22:3f:b9:a1:c2:3f:
                    25:b4:2f:5a:83:31:a6:6e:cd:09:c4:e9:72:1a:2b:
                    3a:8d:4e:6a:c5:92:8d:42:ba:b0:cc:c7:ed:ad:90:
                    28:72:93:a3:06:92:3b:f6:56:c3:c1:6c:92:09:53:
                    88:f8:b5:4e:0e:05:70:13:64:c5:c2:51:1f:50:c1:
                    55:4a:e6:bd:80:5b:57:22:04:8e:c3:d2:2b:9b:fe:
                    23:3b:8c:24:cf:10:42:50:af:65:b3:b9:99:a2:82:
                    83:ea:36:74:47:e4:26:60:c9:58:f7:59:c9:c9:be:
                    aa:17:de:73:57:71:ba:10:66:fe:8d:ca:13:94:b1:
                    e9:59:e5:c3:3d:af:0c:a6:4d:ad:59:8f:da:f5:7d:
                    df:32:ed:b0:48:55:dc:d4:b8:0c:a2:90:3c:93:ff:
                    27:ae:63:00:48:f1:4f:38:0f:06:47:5a:91:ae:75:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:5A:24:F1:9A:AA:69:C2:FB:18:FA:F8:49:C5:60:5D:12:9B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9be85794-7b12-3374-be4d-21e3dde963ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:14:bd:f7:87:c0:66:69:08:66:d4:9c:3f:d0:cc:b2:14:3e:
         31:28:81:8d:58:76:d2:dc:e5:bb:ab:9b:d9:94:53:3f:54:fe:
         33:51:b7:4b:c6:b5:3e:65:c9:62:17:49:8d:74:7e:9e:01:62:
         df:8f:9b:df:2c:0b:e9:69:e7:7c:20:d6:8a:46:db:c6:e3:80:
         18:ec:1d:4a:95:78:37:d9:ff:6a:aa:5c:55:80:e8:3c:80:0a:
         f9:7f:19:ad:f9:68:46:f1:ad:c4:cb:e3:fa:53:3f:9a:25:27:
         5d:f6:b9:ad:b5:6e:86:97:0b:0f:65:18:dd:97:93:bf:12:d8:
         79:76:55:a1:5b:41:9d:b6:92:34:c5:98:0b:22:34:7e:36:5c:
         39:9b:2a:85:d0:a9:02:4f:7c:75:34:d7:7b:e1:70:08:83:c8:
         82:2e:db:8e:44:be:b0:3d:9f:84:06:87:14:b3:f8:d2:ea:9b:
         ca:2a:26:b8:04:69:53:27:44:37:43:20:b7:e7:ed:d9:8e:a7:
         a6:f7:6c:c1:1a:d2:85:af:87:41:0e:6b:5e:fd:a9:0a:b9:ee:
         ea:48:9a:a3:1b:43:9a:e0:5e:a6:e7:45:28:d2:93:b0:72:71:
         ea:bb:81:ac:90:3a:43:17:b7:b3:a9:b9:6a:28:f3:d9:f1:a6:
         d9:1b:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:32:53 2024 by rpki-client on console-fra.rpki-client.org