Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/1f1574aa-d585-309b-bb54-a42ab8ae6056.roa
File:                     1f1574aa-d585-309b-bb54-a42ab8ae6056.roa (raw, json)
Hash identifier:          M+jJB8CcNp7b6p9JdAub868Fok4vdZt7+7uEatMDSQY=
Subject key identifier:   E0:95:F3:D1:9A:33:E7:BE:D5:B4:E1:59:7A:6C:15:8E:BF:56:C9:A9
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F4328584505257468BC49264243F40A00
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/1f1574aa-d585-309b-bb54-a42ab8ae6056.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        209.182.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:74:68:bc:49:26:42:43:f4:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=0747e66b-cea3-487d-be46-76ca86ef6d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:19:31:3d:9f:b5:27:a3:a3:0f:d0:e7:29:
                    3d:e1:dc:12:d1:1f:20:97:d2:3a:07:18:2a:97:02:
                    e8:06:99:45:70:62:78:ef:49:95:87:d8:15:8e:7c:
                    65:5d:f9:76:d6:9c:01:1c:72:27:49:4e:a5:5b:0a:
                    b7:2e:ff:75:77:20:f6:63:ab:1b:0a:b9:0b:67:4d:
                    e9:90:e9:2c:b4:ae:af:4e:22:70:44:bf:b0:af:10:
                    bc:0e:2c:14:dc:02:27:29:87:86:eb:a1:4b:53:10:
                    48:8a:23:fb:97:e7:61:ab:34:29:ae:e6:70:fc:a5:
                    a0:f3:8c:f8:19:c8:5d:8f:b8:56:49:02:6d:30:e3:
                    7c:68:16:42:69:26:5e:b8:a9:e5:cb:99:9b:74:65:
                    87:24:6a:3c:a5:22:ed:c7:7c:9a:14:58:dc:72:1c:
                    d7:84:b2:d4:a0:59:b0:13:52:1e:a1:80:03:3e:cc:
                    04:54:cd:32:74:8e:1d:2f:a3:5b:5b:3a:aa:88:28:
                    ff:f7:a7:ec:61:9c:35:c3:96:2e:1b:88:9b:a7:b9:
                    ff:51:8d:eb:17:63:26:32:30:b1:32:c4:02:db:56:
                    e2:4c:7b:8e:cb:a2:7f:51:27:42:55:84:3d:85:c4:
                    8e:5f:81:88:1e:26:13:d3:5c:dc:d6:5d:31:95:4c:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:95:F3:D1:9A:33:E7:BE:D5:B4:E1:59:7A:6C:15:8E:BF:56:C9:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/1f1574aa-d585-309b-bb54-a42ab8ae6056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:5b:0b:4d:40:33:72:f5:cb:06:a4:cc:5d:d6:2d:7d:0d:
         4e:ae:30:d0:f0:31:10:ed:9c:f6:c8:02:4e:0d:de:ff:c0:e0:
         0e:87:89:5e:3e:46:a0:be:c7:52:a2:c9:c5:42:56:6e:ec:a7:
         85:b1:53:80:77:4c:0d:88:bb:52:8b:ac:e0:f3:8b:eb:8d:c2:
         d6:88:07:85:34:d2:7d:cd:38:7c:0c:e3:29:8f:b2:40:07:38:
         6b:cf:07:6e:37:d8:fd:be:a5:54:5d:c5:fa:dc:98:d1:d3:74:
         e0:37:5d:2b:f8:5b:b6:6d:63:93:63:59:95:8f:ab:11:7e:c1:
         d0:9a:80:f8:fa:9d:81:86:91:a9:fd:69:0e:e9:ce:b4:04:dc:
         f9:46:04:df:38:b3:c3:39:30:e9:9b:21:5d:c5:67:d2:5c:13:
         3d:aa:1a:17:99:06:93:b7:4a:e7:7e:2b:0b:a1:1c:c2:16:11:
         bb:f4:80:ef:5d:90:3e:9d:58:2f:91:f1:72:cf:ba:26:d8:1f:
         45:0c:fe:b5:87:d3:d6:4f:56:dc:42:95:48:a7:ba:77:91:7f:
         7d:47:b2:7a:ab:7b:2f:93:82:2a:13:1e:a5:0f:11:ee:d2:04:
         d2:f0:7d:26:b4:e3:3b:33:03:5f:6e:dc:61:99:cb:11:9e:b2:
         b1:e2:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:50 2024 by rpki-client on console-fra.rpki-client.org