Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e92c991b-75fb-33b7-a11a-feea3fdb6fd8.roa
File:                     e92c991b-75fb-33b7-a11a-feea3fdb6fd8.roa (raw, json)
Hash identifier:          0JuaILlpoVqjbRYlQh9V4Js65gWDZb8/D1BMaeK1Me4=
Subject key identifier:   24:F8:70:D6:D4:5C:6B:10:EE:C2:7C:77:18:29:3A:B7:4D:6B:1A:D9
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845B4E8D59A69EA4328BCB72050
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e92c991b-75fb-33b7-a11a-feea3fdb6fd8.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     13213
IP address blocks:        173.244.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d5:9a:69:ea:43:28:bc:b7:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=3ac12973-3769-433c-ad4c-fb0dbdc1ff48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:5c:70:f5:72:90:24:c4:8c:ec:f4:8c:b3:
                    22:df:04:07:0f:77:0f:52:70:df:72:b3:68:d4:5e:
                    4c:0d:26:75:48:56:f9:3c:9b:78:35:68:be:bc:44:
                    91:cd:17:9f:2e:52:c4:81:e7:84:68:bc:09:26:64:
                    cd:34:8a:0d:0f:44:99:ec:aa:95:6a:79:0f:07:47:
                    76:70:f2:22:1e:94:40:85:74:cc:73:7a:b0:de:6e:
                    96:f5:ff:c1:fc:4c:74:9e:dc:1d:cd:0f:e4:25:5d:
                    e6:1d:f3:2c:76:53:30:5d:ad:3a:57:0b:a2:a5:f4:
                    e5:40:55:e3:94:62:23:ea:ae:e6:f0:79:fc:f7:98:
                    47:d5:80:0a:3e:f6:b2:c6:c5:19:b5:ef:b1:3c:70:
                    5b:fe:62:1d:a6:3a:5e:cd:82:f2:41:79:08:07:47:
                    23:49:37:06:32:29:a0:80:d2:56:af:47:c2:ef:6c:
                    07:80:10:a3:4e:d7:49:51:66:a6:0b:8a:53:63:77:
                    ed:1b:20:85:7b:78:2c:47:c2:9f:db:2d:b3:ec:7f:
                    5d:62:4d:53:bb:8d:b7:af:1e:77:f0:be:86:a1:9f:
                    7c:f1:c5:df:78:df:6b:5a:59:66:d1:12:d3:32:c3:
                    88:f1:57:d4:11:e9:c8:d5:79:bf:69:9a:c5:0b:57:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F8:70:D6:D4:5C:6B:10:EE:C2:7C:77:18:29:3A:B7:4D:6B:1A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e92c991b-75fb-33b7-a11a-feea3fdb6fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:54:e8:6f:0b:32:ee:14:dd:8f:2b:e2:84:cb:e4:0a:54:81:
         67:ff:12:aa:49:89:3d:0b:dc:5d:81:40:2b:c7:b0:bc:8d:d3:
         54:a0:9f:1c:4b:51:a8:2d:31:f1:01:b5:21:52:5f:36:e8:54:
         f4:80:b9:94:3b:65:73:2d:1f:71:27:60:00:af:74:cc:d2:1c:
         cc:74:e4:b5:6b:eb:3b:53:04:77:93:ef:74:d7:9c:a4:2d:0b:
         d9:42:1d:05:57:10:fd:bc:31:70:1e:13:48:64:28:47:45:e2:
         be:50:b4:82:0e:05:51:f5:7e:a6:d2:f4:7c:f2:c4:be:37:4a:
         4c:26:17:ac:1b:43:c9:3a:09:85:c9:2d:97:81:da:6d:1d:16:
         88:b6:25:a7:77:3b:d7:87:b4:09:7e:d4:be:9b:19:df:2a:ec:
         ee:51:68:d7:3e:1f:dc:7c:9b:ff:81:28:7e:a7:b5:b7:7d:0b:
         35:1e:82:96:74:c3:9b:82:37:3b:ea:80:ce:15:cb:ba:d4:4f:
         39:90:5f:01:5a:bf:2c:34:2f:fc:d6:c6:a8:8f:cd:4a:65:c4:
         b9:0e:bb:3c:5d:a6:66:78:64:5d:0a:f0:c0:43:5a:11:58:bc:
         a3:e0:95:cf:c2:96:c3:56:bd:07:a5:94:56:c8:4a:5c:1e:f5:
         60:97:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org