Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d3723871-2bd9-342c-a0d2-1916419350fb.roa
File:                     d3723871-2bd9-342c-a0d2-1916419350fb.roa (raw, json)
Hash identifier:          gSLJF+8mkaz1ntlmsu/VYNwVyxZKGHngl052IJdXnWs=
Subject key identifier:   DE:6C:5F:FC:95:42:3C:44:0B:F0:3A:C4:30:59:86:02:80:75:F2:B2
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328576D51CC73C042CFC173E8682BDA
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d3723871-2bd9-342c-a0d2-1916419350fb.roa
Signing time:             Tue 11 Aug 2020 04:00:00 +0000
ROA not before:           Tue 11 Aug 2020 04:00:00 +0000
ROA not after:            Mon 11 Aug 2025 04:00:00 +0000
asID:                     207609
IP address blocks:        170.39.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:e8:68:2b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Aug 11 04:00:00 2020 GMT
            Not After : Aug 11 04:00:00 2025 GMT
        Subject: CN=86166624-0c24-4788-8bd9-04f5bdc21585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:70:ce:d6:f6:ab:30:ca:44:ff:2b:5c:ae:
                    6c:0e:1f:98:2b:3c:c2:d2:e3:7d:b2:e6:fa:dc:6b:
                    26:30:45:c0:ed:4f:98:c0:27:cc:96:1d:11:e3:53:
                    a2:d6:32:50:bc:72:3c:7a:06:bf:e7:3d:31:6a:7f:
                    35:5f:34:cd:86:b2:ef:13:da:0f:ed:44:c1:44:be:
                    a0:f1:7c:a8:b5:63:8d:71:5a:16:8e:06:e6:63:58:
                    2f:32:8c:43:37:91:7e:24:21:f9:38:68:ba:ed:4e:
                    1a:5a:13:5b:42:99:17:43:59:3a:4a:9a:75:43:88:
                    e7:6c:1e:44:26:6b:7f:75:0a:63:31:8b:50:d9:0e:
                    fd:a5:25:48:20:2e:ad:8e:d0:73:10:f1:a5:4c:42:
                    5c:c2:2a:e3:06:77:39:06:2c:bd:ba:89:88:81:b0:
                    bc:c6:6b:94:1e:85:8e:f7:85:a5:1c:4f:ae:26:59:
                    98:07:fd:a5:26:5d:fb:ee:e1:5e:28:58:d9:41:fd:
                    81:65:81:a2:93:c9:af:8c:01:1a:ad:0f:de:79:3d:
                    16:df:cd:1d:ee:33:f4:aa:d6:6f:46:3e:ee:60:47:
                    6b:7c:07:f4:c6:4f:06:87:ba:12:23:20:ae:2f:aa:
                    44:0d:48:1c:70:d4:8c:de:96:3d:5a:44:8f:d0:7d:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6C:5F:FC:95:42:3C:44:0B:F0:3A:C4:30:59:86:02:80:75:F2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d3723871-2bd9-342c-a0d2-1916419350fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6b:08:25:47:d4:06:1b:eb:58:fd:6a:47:22:70:9e:e8:2e:
         c0:2c:9a:df:5d:95:68:08:3f:a8:5d:5e:ae:c4:b1:72:3c:07:
         2d:f2:bb:15:de:07:51:c8:fe:da:a4:bc:a6:50:94:e2:83:4b:
         dc:7e:05:27:12:8a:45:eb:03:d3:d6:72:57:71:8b:0f:58:3e:
         99:03:13:2c:14:20:79:07:49:fd:d5:12:f4:95:e3:eb:3d:f7:
         8b:0f:e3:bf:dd:7e:96:74:d8:77:13:93:3d:74:c7:56:6e:f4:
         1f:50:63:84:5d:4c:42:ee:99:8b:01:4d:a2:7f:f7:a7:55:88:
         59:8a:9e:38:5c:24:60:5e:64:2f:57:cb:44:1e:70:44:de:a8:
         0f:12:d7:b5:23:64:93:8a:08:dd:68:54:d8:b7:3e:f7:9d:e5:
         6d:65:06:2d:96:b4:fc:a0:84:2e:4d:a3:86:4e:03:a4:75:cf:
         f1:cf:67:23:b7:5b:9c:db:16:ab:95:14:a1:88:49:26:68:7e:
         f5:32:a7:26:3b:de:e6:ca:d7:c5:ed:70:d5:52:1a:5d:54:81:
         4e:24:f8:6c:11:66:03:d9:f2:19:1e:19:74:b7:c7:2a:7d:f4:
         62:7e:10:fc:cc:c6:76:72:4e:40:d6:9c:ee:f0:78:19:82:82:
         1e:a6:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:12 2024 by rpki-client on console-ams.rpki-client.org