Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa
File:                     108a5562-eb3d-36ba-958f-40973f638928.roa (raw, json)
Hash identifier:          4KeCOM7w3ZAiAY7G9N9qnubk5NarcDtT9XRCuLg0IpY=
Subject key identifier:   42:61:60:52:40:31:43:47:45:3A:CC:2B:65:52:FC:BF:16:5D:04:C5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D8F88981339C51A7BC900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     3456
IP address blocks:        204.235.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8f:88:98:13:39:c5:1a:7b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8b29963d-9f32-44c0-a727-a0c9fbf25ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:80:35:e9:16:4b:d1:35:69:a4:8e:25:5f:
                    55:72:5d:f8:14:05:a0:d0:22:03:53:b4:fb:0c:9b:
                    66:dc:75:ee:57:d3:46:fa:af:a1:06:08:e4:ee:1f:
                    68:a4:06:f7:f2:38:4e:9d:1c:31:1a:9e:1f:0f:ce:
                    fd:94:e5:62:87:58:3d:86:9b:54:d1:de:1b:e3:66:
                    76:e1:03:32:a3:4d:5e:0e:cc:82:40:11:60:cf:cb:
                    cf:c3:57:18:09:fc:cb:2c:03:d0:74:b2:69:0e:91:
                    69:2f:41:ca:f8:32:8c:3b:14:ff:52:0f:06:c3:cc:
                    48:8e:b6:b9:06:2a:cf:6b:a5:0d:b2:36:a1:ec:36:
                    1a:7c:dc:e0:82:0b:a5:7b:17:bb:2d:dd:21:ce:94:
                    9b:74:b9:4d:fb:cd:f5:5d:fb:2c:5d:01:89:62:e3:
                    b0:53:c1:31:45:c6:73:b5:be:41:65:ac:ab:bc:a0:
                    a5:40:30:62:3b:39:4a:81:f1:00:c8:f4:d5:99:9d:
                    02:9d:23:ec:ce:ac:fb:32:36:10:52:c2:a3:19:66:
                    19:0e:52:81:f0:50:fa:80:d5:e9:38:b2:da:f2:27:
                    58:5f:15:f8:10:cf:67:74:c2:9e:71:54:2c:28:8f:
                    81:ae:30:82:60:4b:64:2a:59:14:89:b0:76:88:bf:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:60:52:40:31:43:47:45:3A:CC:2B:65:52:FC:BF:16:5D:04:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:41:3a:23:96:78:c8:9b:0d:7b:3a:69:90:24:6c:54:4f:5d:
         5d:8c:a5:4e:28:a7:77:c8:e9:ee:1f:41:4d:d5:f7:80:e8:17:
         53:4b:2c:16:dd:b5:09:43:0f:7c:f7:7a:1c:ec:fd:cd:2f:01:
         12:e4:11:fb:12:36:dd:35:18:e3:b3:62:cb:65:ac:c5:a2:b1:
         17:52:5c:35:b7:33:34:65:d0:59:0a:3c:c8:06:c2:10:83:f9:
         b4:bc:c3:0d:a4:2a:b0:50:32:3c:85:bf:f9:e1:cd:ae:3b:5a:
         37:f0:ba:68:f2:e2:fc:d8:42:2c:e1:b3:ad:ad:fc:3a:cb:4a:
         c8:44:a4:83:05:39:bb:58:4f:6a:3d:e9:ec:c6:88:c3:2b:77:
         61:ba:34:97:fa:24:dd:ef:88:0f:96:76:df:a0:16:5e:7a:90:
         d1:5e:d1:4d:9a:e8:5a:d0:ab:ba:d0:9e:c8:9b:c6:25:92:fb:
         2f:61:a1:3c:f4:1d:eb:1a:07:b7:1a:3b:ec:ab:21:b3:65:31:
         94:8b:de:c1:aa:88:06:81:73:6e:24:22:e7:f9:f2:cf:11:f0:
         a2:00:03:1e:8c:ce:d7:e8:39:ee:a4:6a:15:2f:36:7b:a2:72:
         90:f1:7b:83:7f:97:b1:50:ee:7f:b1:df:d3:61:31:c2:24:03:
         4e:93:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:52 2024 by rpki-client on console-ams.rpki-client.org