Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa
File:                     4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa (raw, json)
Hash identifier:          LGj/jnYOzn7SlaY/m6C4r7HFIdx+4I6lrHj51mey0VI=
Subject key identifier:   47:3E:26:0B:04:0C:CE:90:B0:85:51:5F:DC:A5:A3:B1:B8:C1:C8:C2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D828D43B7AE5F1987A95880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     21723
IP address blocks:        208.38.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:8d:43:b7:ae:5f:19:87:a9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=be0c2629-ba12-40a2-93bd-5d9ef4139d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:38:e2:76:a5:ca:43:6e:2a:d0:a4:5c:77:
                    7a:f4:db:26:63:52:56:08:51:05:a5:db:26:21:16:
                    67:d0:e4:56:5b:41:fb:8c:5e:5d:76:56:d5:cc:61:
                    4a:16:6c:fb:99:98:ce:d3:0c:59:96:ac:4c:6b:1f:
                    8d:52:ce:a8:78:ca:0f:f3:43:f1:14:d0:13:8e:e3:
                    fd:40:b2:f2:56:29:7c:46:56:a0:5a:9f:f1:2a:43:
                    3c:fe:a6:00:30:5e:3c:48:ee:1c:1d:32:bc:b1:01:
                    57:72:0b:68:5d:62:39:9e:ea:41:d4:58:f6:b7:a7:
                    bf:51:0a:2f:67:6e:eb:7a:16:5d:4e:fc:0b:a2:01:
                    42:59:d5:df:48:b0:11:da:75:0e:65:98:b8:99:81:
                    6a:f0:f7:8d:a5:12:fa:f0:82:b7:a0:d6:74:e9:bc:
                    e1:07:41:91:4b:0c:a7:62:0e:12:88:13:10:ee:0f:
                    f3:55:cb:ba:5f:24:dc:92:f9:39:0a:21:ac:e4:88:
                    f1:be:0b:32:df:0e:65:26:e1:be:7d:db:67:03:7a:
                    41:6b:20:f4:88:d8:8e:bc:2b:7f:dd:3c:c8:38:19:
                    35:f3:16:39:ab:5c:f4:b0:0e:40:b7:5f:c0:c7:71:
                    0e:69:5c:b1:d0:28:0b:3a:b0:92:45:7b:ec:c9:15:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:26:0B:04:0C:CE:90:B0:85:51:5F:DC:A5:A3:B1:B8:C1:C8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:bb:4a:34:a6:a1:e1:a1:33:e8:32:f3:1d:65:3b:5e:1c:
         3c:a5:4b:88:a8:55:65:60:f8:c3:0f:90:84:c8:01:23:95:1d:
         d6:61:0b:78:33:4c:99:96:dc:cb:85:d6:65:9e:9e:24:83:8e:
         90:18:ac:42:d5:00:75:66:b5:5b:4f:0b:be:3c:e3:cf:0e:e7:
         16:32:50:4b:b7:18:12:e7:ca:b4:69:2d:7c:7c:2e:7f:0c:33:
         d8:ab:d3:7d:3f:48:79:b8:1f:c1:71:59:da:b0:90:16:8f:c5:
         1c:aa:bf:9a:5a:bf:1a:80:90:b4:cb:ba:63:ce:2b:a0:64:28:
         5b:3f:03:d6:7e:c4:12:82:a8:42:1b:5e:e7:c9:56:11:9a:02:
         be:ba:64:88:68:f0:59:93:4c:a0:27:c6:9f:a3:02:e8:be:e9:
         aa:08:d0:55:52:eb:51:5a:e0:e6:c3:60:9d:9f:a1:d9:ff:ce:
         c6:5e:c3:83:61:0e:7e:86:d5:94:6b:2d:bb:75:ad:de:00:b1:
         08:e3:e1:08:a0:15:35:d2:81:24:36:f9:b3:0b:23:37:40:a3:
         88:c4:9a:d5:33:fa:2a:ea:bb:40:56:eb:06:44:ca:aa:8a:e8:
         b0:b2:cf:4e:e2:a3:a6:0d:c2:e2:f5:4d:3c:70:b6:ab:b5:09:
         7e:32:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:56:46 2024 by rpki-client on console-ams.rpki-client.org