Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc4d1f8-ca42-3818-b8e8-8657ec99c687.roa
File:                     cdc4d1f8-ca42-3818-b8e8-8657ec99c687.roa (raw, json)
Hash identifier:          HiCJrO6+oWyrVl7gO8RBw6PeZ1vgL+6D6qdMqVte+7w=
Subject key identifier:   AD:28:4C:D0:4C:E6:40:F2:D7:4B:E8:C2:99:A6:A6:6C:51:CD:E1:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841A9B4FB076D520D4CF0DBB380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc4d1f8-ca42-3818-b8e8-8657ec99c687.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 27 Jul 2025 04:00:00 +0000
asID:                     400759
IP address blocks:        142.252.42.0/24 maxlen: 24
                          172.252.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a9:b4:fb:07:6d:52:0d:4c:f0:db:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 27 04:00:00 2025 GMT
        Subject: CN=b1182851-a633-4c73-a3ea-bda3002e4ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:87:67:8a:a4:09:16:a7:ee:a7:56:1c:37:
                    35:3a:54:f7:b2:97:87:d0:c0:c0:f2:c0:0e:fd:48:
                    2b:61:c6:08:a4:a5:f1:be:36:53:ef:2e:c6:51:8e:
                    12:b9:ad:d3:e1:85:4d:97:b1:66:4c:f2:48:61:89:
                    42:29:0d:b7:dc:62:de:6c:72:e9:58:79:8e:36:9e:
                    0e:61:7c:c8:b3:df:e2:92:d7:4b:06:ca:44:41:c4:
                    6c:80:7e:c7:e9:af:3a:93:27:30:bb:e6:06:da:ff:
                    da:46:ec:db:d2:4d:f0:49:7f:26:75:99:f4:88:bc:
                    76:8b:d9:5c:72:35:ac:09:f0:81:3f:68:d8:81:fe:
                    ab:c8:38:df:2e:a9:53:66:d8:09:2b:ee:32:a8:c6:
                    30:3d:79:05:fc:93:0a:f9:b6:3f:4a:88:eb:c3:78:
                    d2:57:79:df:19:e2:49:e7:ca:2e:a3:7e:9a:f6:17:
                    99:2e:ae:15:c4:fa:a6:f9:1e:70:d9:d2:6b:22:2f:
                    f5:93:9d:76:c6:9f:23:79:40:d0:70:03:b4:2a:65:
                    81:c3:5e:3e:e6:6a:c4:25:51:b1:4e:44:3e:4b:ea:
                    bb:07:5b:d2:8a:59:a4:05:d8:9b:7e:ed:e1:19:01:
                    32:5f:6d:08:e4:ab:e6:1f:0a:91:1f:8c:3c:4e:ce:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:28:4C:D0:4C:E6:40:F2:D7:4B:E8:C2:99:A6:A6:6C:51:CD:E1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc4d1f8-ca42-3818-b8e8-8657ec99c687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.42.0/24
                  172.252.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:22:45:81:b8:7b:ea:dd:db:06:52:4a:e4:e8:f1:c1:fd:af:
         03:62:c9:ab:aa:29:93:9d:f2:7e:c4:8c:31:ac:24:c2:18:55:
         19:03:49:a0:2b:8d:ed:44:24:c2:86:d0:fa:ee:d8:ef:25:04:
         6b:cf:02:6c:78:b5:b9:17:fd:9b:ae:c8:0c:9a:f7:3e:44:e8:
         dd:63:98:ab:07:95:43:c0:79:61:f9:03:af:98:3a:37:19:bc:
         f3:08:2d:f9:c7:fe:aa:80:ac:6c:a9:90:c3:c8:b2:9a:d5:1c:
         31:d3:fb:ee:6e:99:d9:23:ca:09:ff:87:03:43:ef:31:60:6f:
         8a:08:48:e0:6f:ca:01:22:37:c7:c8:54:89:e1:3a:64:e4:c3:
         49:4f:aa:5a:c5:bc:de:7f:7a:a6:13:dc:fe:19:1c:ab:26:54:
         28:a7:fb:66:d2:36:29:5a:ff:ff:70:f1:02:a1:fd:db:63:58:
         8d:e2:be:cf:d4:b0:28:12:6f:ba:4d:7a:7d:a8:0f:8b:79:5a:
         dc:3f:d7:f2:bb:b1:fa:c0:44:3f:89:d5:42:96:42:f2:51:40:
         a7:e8:49:09:43:76:9d:c0:be:d3:4a:c3:d7:7f:e2:0d:2b:18:
         b6:f8:e7:3e:43:ab:7c:0a:ff:21:d2:9c:e2:5b:05:5c:bb:3b:
         e1:3d:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:29 2024 by rpki-client on console-fra.rpki-client.org