Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/025d5c3f-1a08-3fb7-90fc-41a757f685f7.roa
File:                     025d5c3f-1a08-3fb7-90fc-41a757f685f7.roa (raw, json)
Hash identifier:          gl8StdyFRtT+ARkgkZzLAHpTxLt6NDQ+tqXdH1GlBHA=
Subject key identifier:   1B:E1:7D:A5:63:9D:FB:6E:A6:20:16:C8:35:40:09:4A:78:5B:A6:97
Certificate issuer:       /CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
Certificate serial:       010D0C9F432858457082FDC264C995FAA0263D80
Authority key identifier: CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/025d5c3f-1a08-3fb7-90fc-41a757f685f7.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     21681
IP address blocks:        199.196.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fd:c2:64:c9:95:fa:a0:26:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=dde38281-ceb2-44a2-be50-60475a237407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:04:6b:0f:7f:3b:6c:90:28:86:c4:5c:86:
                    23:8c:29:08:32:c3:66:6c:54:53:52:95:9c:aa:90:
                    21:e3:55:91:0c:66:9a:a1:eb:a8:7d:ca:66:65:fb:
                    58:e0:74:77:f1:bb:3f:ea:95:39:ec:84:9f:19:31:
                    89:49:84:94:98:30:10:71:b3:7a:6b:ca:e4:5b:51:
                    62:e3:53:9c:69:d3:83:9e:c2:f7:fe:5a:d5:44:46:
                    1d:17:5d:47:a6:dd:bb:b4:67:03:8a:37:f9:ae:c4:
                    61:0e:f3:73:78:6d:8a:32:06:79:da:e4:4d:0e:b6:
                    f9:20:28:ac:44:6a:09:7e:22:b0:d7:a3:10:79:66:
                    29:31:11:a9:b5:0e:80:e4:20:80:a1:a2:12:83:34:
                    74:88:a8:ba:5b:54:68:c5:00:9e:5d:a6:5c:6a:d7:
                    44:99:ae:0e:60:6e:94:a0:4c:a2:02:c8:c2:aa:58:
                    cd:9e:74:46:d7:41:ce:ae:3a:bc:a1:53:59:73:07:
                    3a:89:68:88:9b:8a:ec:17:3f:a1:5f:df:c5:96:ec:
                    43:88:ee:5a:98:41:31:20:b3:c4:37:be:56:c6:bc:
                    70:5f:b8:27:ea:60:b6:dd:2b:22:01:ca:99:6f:08:
                    41:aa:2d:a9:c3:02:25:dd:9c:57:73:4f:09:6b:2f:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:7D:A5:63:9D:FB:6E:A6:20:16:C8:35:40:09:4A:78:5B:A6:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/025d5c3f-1a08-3fb7-90fc-41a757f685f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.196.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:3d:fa:96:8a:fa:b6:af:aa:2d:d7:dc:bd:04:e2:8b:de:
         b6:28:2d:8b:7b:59:b0:28:c6:2e:63:f4:04:a5:02:4c:d6:5d:
         48:07:5d:67:00:15:36:d2:a0:31:f6:a9:ec:7b:48:0a:86:90:
         c5:1f:b7:f0:3f:ac:47:46:4c:08:94:36:16:60:d6:27:6c:7c:
         56:49:67:49:80:14:e0:47:6b:f3:b0:ff:ad:56:31:7a:fc:53:
         f4:87:0d:cd:08:59:1e:1f:4a:7c:04:8e:0c:4e:21:bb:7c:a7:
         9f:49:13:37:18:bc:87:79:05:20:6c:4f:f3:74:8d:06:a4:77:
         f5:a0:96:b0:35:07:3a:8e:ad:3f:3c:a0:f0:77:32:6f:7a:f7:
         9c:02:9d:b5:77:75:b5:35:be:58:65:4a:a0:e0:c3:eb:77:b8:
         0c:3d:d6:6d:93:be:cb:69:cd:2c:bf:1a:d5:d1:2f:e2:1c:35:
         26:e9:ae:f4:a0:60:86:17:e4:b1:1b:64:6f:d6:7c:f8:c9:25:
         f7:b4:e9:71:d3:ae:9d:0c:e8:37:2a:dc:42:cc:7d:46:71:fb:
         d3:8e:8e:d3:21:e9:15:f7:e7:20:9d:27:55:b5:89:9a:d8:e3:
         0a:73:44:a6:bf:22:09:42:7a:28:57:17:18:5a:5f:b4:a9:66:
         8f:03:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:32 2024 by rpki-client on console-fra.rpki-client.org