Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
File:                     4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa (raw, json)
Hash identifier:          1/Jkr2IULSQ5ZCJ0bFMyvQFpKcpvIeU0F1QdlS16qVg=
Subject key identifier:   F1:00:56:96:32:4F:D4:96:CA:F8:87:C1:39:41:A3:51:32:79:1D:58
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F43285845227598D9BA8A4CEDB5121A40
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        209.182.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:98:d9:ba:8a:4c:ed:b5:12:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=52fc6ad3-b1e1-4ea8-8a2e-450c9bd03a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:32:19:7b:d5:d1:d8:1a:a5:0e:e8:b2:a2:
                    fb:a9:22:7e:a6:71:f4:01:32:7b:4b:69:ae:62:1a:
                    f0:bd:22:e8:4e:89:ef:4d:90:7d:e2:42:5a:b2:20:
                    13:29:8c:9d:9b:15:d2:b4:c7:f0:4f:62:4a:22:32:
                    99:5e:57:e1:5b:6c:90:f8:5d:21:ec:f2:c8:9d:b1:
                    8c:de:93:d2:d9:ca:4d:41:94:ba:2d:fb:21:de:6e:
                    6d:b6:b9:d4:1e:6b:ec:f6:d8:c0:96:f4:40:38:fb:
                    3b:0d:02:5b:77:5d:5f:7d:5f:4f:76:84:aa:98:0f:
                    7d:fb:15:5d:a6:a5:89:2e:22:c5:a9:ba:33:b5:d3:
                    c1:11:37:0e:ca:9e:ac:56:fe:1b:51:45:44:d2:92:
                    71:50:b4:19:71:c7:06:04:40:41:92:b9:b2:67:e2:
                    9e:26:1d:08:02:7b:18:a9:13:2b:62:4a:53:72:17:
                    6f:f4:b2:c8:36:c6:3b:71:3a:33:16:ad:53:47:39:
                    08:13:f9:fa:fe:2d:aa:73:29:66:a4:49:64:79:0e:
                    79:90:8d:46:a3:7a:57:b7:73:05:5f:7d:fc:be:06:
                    5b:05:c0:c6:ee:64:80:c5:a0:dd:87:c0:f8:a2:f4:
                    19:6d:0a:fb:81:f7:8b:27:80:a0:36:24:a6:fd:98:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:00:56:96:32:4F:D4:96:CA:F8:87:C1:39:41:A3:51:32:79:1D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c6:62:cd:67:89:a1:6c:03:57:f8:83:ba:96:36:f1:1e:aa:
         e2:e2:fb:ee:e4:bd:e1:74:e8:5c:b3:f5:4b:cc:61:ee:a8:ff:
         2a:d3:14:e4:29:4c:5d:54:50:df:2e:af:ab:18:f6:85:2f:bb:
         f3:70:8b:f4:64:87:38:4b:28:c8:bb:0b:93:17:c0:92:a7:56:
         a0:c5:a2:c0:e4:7c:1b:47:73:7e:18:c8:d1:a9:42:a2:1a:6f:
         2b:3a:aa:9b:31:6c:d7:93:e7:4d:8c:4c:7d:ce:df:9c:3d:b8:
         a9:39:04:3d:f7:43:54:04:25:a7:bc:1f:69:e8:ca:18:4f:76:
         5c:12:d8:80:c3:19:3d:51:d0:4a:20:6b:08:47:6b:b5:6c:fe:
         6a:e6:6a:a1:27:aa:56:6b:4d:79:6b:30:f2:e8:a5:ca:33:ee:
         6f:2c:17:ee:41:99:76:57:c2:1b:fa:63:4a:fc:f2:f8:07:ff:
         a0:00:dc:7a:18:69:cf:61:8a:7c:21:58:b3:1a:cd:f6:21:cb:
         e2:c5:fe:b2:2b:83:3d:57:96:57:a7:eb:c3:27:94:57:74:5a:
         a2:6f:33:cb:c7:ad:f6:01:9b:7c:4c:c1:01:e4:1a:7c:20:35:
         47:76:3a:8a:ed:54:38:88:95:30:86:4e:98:42:d6:18:b9:36:
         b0:88:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:44 2024 by rpki-client on console-ams.rpki-client.org