Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa
File:                     e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa (raw, json)
Hash identifier:          PettXlFpenquTiFNNkfIGkkI7nWsQIgtUmYyc6KLl1s=
Subject key identifier:   E4:3E:51:0A:BD:F3:80:6E:F0:09:A6:60:61:CF:7B:8D:15:45:B2:59
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D828A3C7E64B8C9E55DB280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     19905
IP address blocks:        207.194.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:8a:3c:7e:64:b8:c9:e5:5d:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=5147072e-4580-4bbf-be3d-110efde8dd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:02:f7:f2:10:5b:8b:bd:66:16:44:a0:0e:
                    45:9c:ae:57:fa:ef:6d:bf:f1:44:37:9b:14:fe:93:
                    3b:aa:c7:07:61:00:39:96:75:1f:09:e9:3f:39:dc:
                    06:cf:0c:cc:83:e8:f0:53:b2:bf:c8:24:2e:a0:c9:
                    03:9d:85:83:98:be:a8:00:a1:93:20:21:2b:e6:00:
                    c5:4e:ef:e5:c6:01:a7:ed:95:9d:e3:5d:07:59:57:
                    73:c4:60:5b:cb:51:ec:16:15:d8:5a:c4:90:1e:ec:
                    22:95:2f:e8:6c:54:48:dd:f6:da:16:85:f8:3e:b8:
                    3d:ce:10:65:54:83:1f:c1:04:a3:39:91:33:a5:04:
                    a2:65:43:dc:45:7e:63:90:af:b9:d8:09:be:cf:b4:
                    a4:be:1c:67:9a:0b:1a:e0:26:09:c0:9c:70:db:23:
                    07:ec:0d:db:3d:0a:e0:4b:17:d0:f8:f8:94:ba:85:
                    35:c5:9e:07:2b:67:0c:f2:02:bd:23:ec:7c:77:68:
                    65:30:21:13:c7:f2:15:ca:b6:c1:7e:47:16:75:21:
                    83:7e:55:03:3e:33:81:83:dc:01:ba:5f:a5:1f:73:
                    8d:7b:b1:e1:39:bd:60:61:9e:63:9e:e4:46:b4:e3:
                    d9:87:f4:4f:91:f2:a9:a7:46:69:3d:fd:5a:e6:70:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:51:0A:BD:F3:80:6E:F0:09:A6:60:61:CF:7B:8D:15:45:B2:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:8a:d8:d5:05:55:72:a3:e1:0a:64:39:af:24:f4:75:0b:
         40:79:a6:3c:b8:45:27:5d:db:d7:15:6d:8d:6c:89:80:c1:06:
         ce:54:50:c3:ce:81:63:9c:ef:ba:08:49:2b:29:ab:80:ff:41:
         80:62:75:5b:ef:c5:15:c2:94:a7:bd:45:c6:9a:b3:23:d6:81:
         e9:57:2a:f0:5c:81:32:6b:9e:9f:64:45:dc:87:d9:e9:2f:10:
         a7:17:c9:40:bd:87:37:c9:7b:6d:ca:e9:0e:fb:b0:dd:48:03:
         f0:a7:24:fb:a6:af:59:a2:91:b5:b6:ce:46:7b:e3:44:4b:dd:
         07:f6:43:86:63:e3:48:15:1c:33:ec:d1:ac:a3:3c:b7:97:06:
         4b:db:81:9b:38:f3:f5:2a:c7:6b:0b:97:9f:f5:25:4b:9f:cd:
         fc:ab:d4:91:2a:e6:5d:90:3a:62:19:21:70:04:6b:68:48:49:
         ab:df:0c:99:08:80:e7:c9:d5:22:0e:84:21:45:39:51:00:55:
         c5:8e:0b:dc:6c:b6:34:4d:5f:ad:24:7f:31:45:1b:80:7e:f6:
         da:2f:d7:fe:b6:32:4e:9f:30:3d:5b:27:b5:11:11:fc:3b:be:
         34:a2:5e:6b:5e:aa:11:97:b6:6c:83:01:4c:64:99:75:9a:e2:
         21:3f:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:40 2024 by rpki-client on console-ams.rpki-client.org