Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a3ea9598-6eac-3570-a905-baa29f32fc21.roa
File:                     a3ea9598-6eac-3570-a905-baa29f32fc21.roa (raw, json)
Hash identifier:          JGRLw5aN38PCT2wxB4fFSmMSQtyONJpFCf1XEzxDjZ8=
Subject key identifier:   CD:C9:55:0A:04:86:D4:81:98:92:71:A9:41:53:F4:80:92:41:74:5B
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285844FCC568B9D09557C1263EC400
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a3ea9598-6eac-3570-a905-baa29f32fc21.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     7922
IP address blocks:        134.202.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:68:b9:d0:95:57:c1:26:3e:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=62019b9b-4997-4eba-bd5e-a031f56cbbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:05:4a:fb:57:ff:0d:78:18:95:dc:22:87:
                    38:8c:de:ce:ce:1f:dd:77:5e:f8:d1:9e:2e:aa:b9:
                    8c:24:23:86:86:3c:b2:a7:fa:d0:45:d9:fb:99:e5:
                    94:31:ea:8d:7f:26:44:f2:96:eb:cc:37:4c:b0:9b:
                    07:4e:89:8c:24:67:17:44:7f:c9:54:0c:02:bf:c4:
                    a6:a3:8d:bc:34:1b:9a:82:f2:53:b6:9b:a3:3c:59:
                    9a:8d:16:ea:2b:03:f2:25:9a:14:c9:48:d0:5e:4c:
                    e2:0d:36:0b:0d:f8:9b:64:4b:86:47:18:85:f9:d8:
                    99:39:9a:a3:21:d6:7f:5e:81:91:30:33:11:17:cb:
                    72:03:73:f6:7b:82:45:61:66:66:fa:ec:67:f3:0f:
                    3b:fe:08:6f:fa:43:cf:6c:9a:e5:d0:07:17:2b:35:
                    cb:6e:3d:f3:f6:36:05:ff:3b:af:a2:11:41:2b:77:
                    e5:43:c3:4e:1a:a0:2f:af:13:cc:ca:41:e6:fa:1f:
                    e3:2f:fe:ee:5b:57:58:49:49:d4:73:c4:83:55:f3:
                    c8:1b:01:a6:1b:54:3b:5e:3d:5c:22:57:2a:3b:89:
                    62:6f:68:50:4e:ee:e6:7e:6b:09:12:0a:22:b6:78:
                    aa:0c:f9:13:40:87:10:51:9e:83:ed:5c:20:fd:af:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:55:0A:04:86:D4:81:98:92:71:A9:41:53:F4:80:92:41:74:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a3ea9598-6eac-3570-a905-baa29f32fc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a8:47:32:3c:f3:5b:dc:5d:c3:3b:c3:53:9f:39:19:eb:d1:
         49:27:26:e8:76:a5:05:a5:db:98:c8:6d:1f:5a:ad:28:7f:2b:
         7d:7b:09:9d:6f:ff:fe:9f:0e:24:fb:b0:e5:7f:43:e0:12:bf:
         ee:2a:b3:2c:cd:27:98:13:a0:96:53:44:b3:a9:6d:e8:d2:78:
         6f:47:19:57:31:8a:96:33:86:37:01:1b:e8:e4:d6:f1:5c:a2:
         32:48:19:67:b1:67:eb:73:bc:8c:fd:78:58:02:15:e4:99:db:
         28:24:2d:77:55:ad:a8:ec:9b:71:8e:d1:8b:c5:03:8e:fd:bc:
         34:e0:f5:42:59:1e:6d:b7:57:4b:b8:4b:d2:9a:80:11:d7:c6:
         2f:36:35:4a:05:fa:5a:d2:1d:ca:9f:7e:2e:e0:e4:7e:b4:19:
         8c:79:fc:0e:6e:65:1f:6d:37:39:7a:f8:1e:96:64:3a:23:4b:
         c1:9c:7e:e1:f4:ec:54:51:f8:7b:e5:69:f2:ad:0d:f4:1c:69:
         de:80:8c:a5:1f:81:29:64:46:9f:30:23:67:74:b6:c8:58:77:
         44:36:3e:0a:ca:da:ab:0c:5a:18:c9:bc:1c:6c:da:72:99:80:
         2c:1c:cf:41:ac:0a:91:60:a8:77:bb:07:cb:cf:7f:51:31:ba:
         bd:76:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:42 2024 by rpki-client on console-fra.rpki-client.org