Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
File:                     d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa (raw, json)
Hash identifier:          lZn02oU5U1t12S/tHwB8/KhNcpa2HEAnBm9i9wZlR+U=
Subject key identifier:   7F:BE:0B:FE:ED:E1:40:5A:2E:97:3F:22:61:46:E2:6B:A8:65:F8:2A
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F43285845B7B379E85752203523ED4700
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     396045
IP address blocks:        142.202.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:79:e8:57:52:20:35:23:ed:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=6d4081d2-0c7a-4b84-abae-b60adad43aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:3e:82:d9:32:f2:ff:8b:ce:d3:25:3a:a4:
                    ad:14:db:3b:fe:df:23:a2:38:b9:eb:95:dc:1c:0c:
                    67:d3:0f:b1:09:5e:e8:8f:db:83:c7:a8:ac:cd:06:
                    01:bc:42:0d:49:bf:e4:66:f0:09:cf:35:be:a5:9e:
                    b0:61:9e:24:a5:1c:20:5b:82:c4:b6:2b:a0:f7:93:
                    3f:d9:07:1b:04:1b:a9:c0:3b:7f:c8:be:a6:77:fa:
                    d6:d1:8e:a0:8c:cd:58:8d:fe:fd:22:de:45:4e:eb:
                    df:8f:1a:ca:d3:28:a9:40:3f:30:f6:43:e3:f5:a0:
                    88:fa:f3:9d:1a:86:a7:4a:21:83:15:f2:43:af:8c:
                    be:ee:2e:b9:6d:94:60:56:f2:ed:1d:d1:67:bf:b0:
                    95:e8:8d:d5:ac:c6:50:33:03:5a:4e:46:77:21:35:
                    b6:30:a3:46:f5:34:33:03:e1:c8:5e:d3:14:f6:68:
                    87:91:06:04:3f:8c:36:14:e1:41:e3:4c:2d:10:d6:
                    b8:5b:36:38:c4:5a:e0:e8:22:52:cd:fa:20:5f:5d:
                    89:27:2b:ca:2b:9d:ed:4b:81:d5:84:35:b4:bb:64:
                    02:16:fd:08:8e:3b:68:b2:e8:d1:6f:86:a4:ed:1a:
                    fa:d0:ef:f2:59:b1:a4:7d:05:de:39:58:3d:06:56:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:0B:FE:ED:E1:40:5A:2E:97:3F:22:61:46:E2:6B:A8:65:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:db:80:97:b8:9c:5a:a1:d3:00:42:2c:f5:57:df:f3:7e:
         70:dd:15:ce:8a:fc:c3:2c:36:d8:69:d7:eb:a9:53:8f:97:d5:
         1c:43:32:ef:56:82:09:3c:b6:f8:07:8a:df:c0:78:99:86:03:
         91:1e:93:b0:f2:c4:b8:74:01:0b:ad:64:99:0f:f6:85:21:04:
         3c:da:ae:e9:be:af:cb:ca:a9:59:79:a2:d2:b0:5a:51:95:88:
         07:47:57:c2:9f:c6:29:92:0d:d9:1c:1b:87:fd:3b:72:d1:f8:
         02:89:0f:d4:ac:03:26:9e:67:ec:90:df:ed:be:e9:66:44:30:
         05:3c:7c:a4:10:78:58:94:1d:06:c8:ba:ac:2f:3f:46:28:57:
         e6:49:0b:81:95:27:27:c8:94:55:bb:51:a0:76:70:11:ad:73:
         c2:90:1f:4f:2a:fb:d5:59:4d:39:9e:2c:23:c7:4d:ce:83:35:
         5e:c3:ab:a4:0d:ba:91:a1:02:8c:1c:88:12:8d:3e:37:63:dd:
         d1:01:2d:02:ec:29:54:31:a5:59:4b:6c:4a:0b:ce:2e:02:70:
         eb:ba:19:81:ff:0c:6e:f0:1d:00:27:8c:93:56:fe:73:50:e2:
         66:9c:56:b1:05:00:64:78:0e:1b:3d:3e:21:51:5e:84:f0:db:
         b5:9e:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:18:08 2024 by rpki-client on console-ams.rpki-client.org