Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
File:                     c2732a11-37c3-37c2-9591-4654376ee597.roa (raw, json)
Hash identifier:          EZsrWmYliH9auNRile2HflyGBwSOsPJYEJ+uXJEBvsY=
Subject key identifier:   0E:91:0F:79:FA:7B:CB:03:48:43:0D:30:B4:73:DA:DD:BE:A7:A2:FC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584558C8409A8E0CD817A63F4840
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     40676
IP address blocks:        108.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:40:9a:8e:0c:d8:17:a6:3f:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=8c31d6ef-4fdc-46eb-b078-b8edb828722a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:83:c8:a9:50:a2:e3:38:1e:fb:4e:8d:8f:
                    ae:42:1d:b0:12:05:c5:18:23:fa:2d:fd:6c:79:04:
                    d9:c3:d4:1f:34:82:28:9d:ab:e3:13:ff:d3:eb:3f:
                    68:96:c0:be:d7:10:3e:21:63:3b:76:6c:60:d0:de:
                    41:8e:64:c2:ac:51:28:22:20:85:57:fe:7e:90:f6:
                    c7:ea:03:f9:69:07:63:62:76:dd:8e:75:1b:c8:0f:
                    55:70:18:3b:df:5f:a7:b1:18:c0:21:c6:77:02:68:
                    07:4b:94:31:53:7f:a4:70:dc:98:fe:34:f5:49:59:
                    47:eb:c2:18:48:20:01:ef:da:ea:ec:77:8c:12:08:
                    c4:bf:eb:6a:7a:16:f8:9c:ee:37:41:b0:0c:28:4b:
                    41:d8:31:ce:c5:d3:0f:de:63:07:fa:67:dd:3a:cd:
                    b0:44:9d:9a:f2:e5:12:d4:7b:3f:23:c5:ca:46:78:
                    33:7d:d9:2d:42:1c:5b:e1:09:b6:01:ff:86:f5:13:
                    ce:ed:69:0b:b7:5b:4e:fc:54:b4:6e:2e:ee:22:50:
                    08:36:a1:91:c7:d7:45:44:b1:26:c7:38:65:7c:50:
                    5c:55:5f:55:97:0c:a0:13:07:fb:94:5e:80:bd:8e:
                    6a:59:35:5b:25:c1:1a:f7:4a:ed:e3:eb:40:4e:af:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:91:0F:79:FA:7B:CB:03:48:43:0D:30:B4:73:DA:DD:BE:A7:A2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:14:9d:f9:5c:06:a6:c3:44:8e:42:73:af:85:d6:36:df:9b:
         a4:4f:19:07:c8:cc:86:56:5d:ec:8d:c0:af:ba:27:85:64:0a:
         bb:f9:14:2a:b7:9a:6c:0d:10:0e:86:a3:b4:e6:d0:44:db:3e:
         5f:a5:68:b1:fb:1e:b0:5b:d9:b6:81:c3:84:cc:de:f5:99:fc:
         74:9f:c3:a6:1e:b3:c9:e1:71:ff:ea:af:66:31:19:aa:a0:5f:
         d4:e5:0d:0e:de:10:98:d2:4b:68:19:ca:ba:eb:a3:35:c8:b7:
         e4:be:58:3c:2e:55:02:0c:ac:a8:e8:49:6c:9b:ce:ac:72:26:
         f6:81:55:b7:58:8f:12:a7:e9:72:8c:9c:f2:8e:84:d8:17:18:
         92:95:88:88:df:b6:3b:f0:bc:0d:2e:64:10:08:48:d0:b4:e2:
         92:ef:89:ac:49:0c:3f:4d:94:f7:23:61:cc:f6:4e:d1:00:50:
         7a:6d:05:cf:78:bc:f5:3e:14:e0:ff:7c:af:91:77:4c:1a:0f:
         1c:d1:a3:90:87:6b:99:6f:97:a1:82:41:0b:3f:1d:ee:98:71:
         5e:c5:0a:58:cb:7c:48:15:3e:49:2e:36:36:30:49:e4:f0:67:
         93:d1:3c:69:31:61:f7:ec:e2:92:59:81:21:f3:e3:55:d0:40:
         b0:c8:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:15:54 2024 by rpki-client on console-ams.rpki-client.org