Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2098394d-aa00-36d2-9078-daaffcacb6f3.roa
File:                     2098394d-aa00-36d2-9078-daaffcacb6f3.roa (raw, json)
Hash identifier:          0phhFh5eB0JUyhLtB/F0eJX4NnQ5I1cbjEP5i7/+YKI=
Subject key identifier:   1C:FC:DE:D6:31:A3:76:30:29:57:74:80:63:89:21:2F:B6:75:35:99
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462718BA732E4D6418A4B620
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2098394d-aa00-36d2-9078-daaffcacb6f3.roa
Signing time:             Wed 20 Mar 2024 20:51:26 +0000
ROA not before:           Wed 20 Mar 2024 20:51:26 +0000
ROA not after:            Tue 18 Jun 2024 20:51:26 +0000
asID:                     36040
IP address blocks:        208.117.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:18:ba:73:2e:4d:64:18:a4:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:51:26 2024 GMT
            Not After : Jun 18 20:51:26 2024 GMT
        Subject: CN=dc72d0a4-6f21-4954-8622-c5ba58bd8b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:fc:4b:78:14:4b:7c:c0:6c:c1:c9:b6:69:
                    f3:04:2a:af:02:c8:c3:42:12:9c:e5:8b:7b:29:c0:
                    93:85:73:2f:31:cf:cd:16:7e:43:cf:ca:7a:6e:81:
                    61:49:73:a8:db:31:04:42:22:c4:f5:7b:17:1f:1e:
                    39:1a:fa:b0:70:fb:63:b3:ea:ba:d2:41:4f:40:1d:
                    4c:3b:54:f9:c6:3f:bc:c3:14:69:08:f2:f2:51:38:
                    ab:2e:c7:79:01:a4:c6:e6:70:8b:3d:f1:de:80:d2:
                    cb:a3:4e:06:aa:0a:90:12:ac:86:bc:36:70:43:ac:
                    24:f0:4b:77:59:4c:31:5e:53:d0:68:df:97:9f:10:
                    d9:2e:cd:11:fb:76:8c:57:5b:b8:a1:a6:27:fa:12:
                    1f:2c:fd:60:ed:0f:63:ba:f0:4f:11:55:47:63:bd:
                    bc:0e:08:85:b9:88:47:62:c2:67:9f:ea:b4:f4:f1:
                    ac:11:64:ea:39:61:d3:02:ec:48:d6:0e:7a:9f:a2:
                    f9:9d:46:34:c3:2e:04:3c:89:2c:59:51:5a:c5:e2:
                    ea:ec:e5:e6:bf:3c:f8:25:f5:6d:f3:fa:74:58:47:
                    8e:cb:36:fa:32:8f:ca:c6:d9:a9:ba:20:d2:d4:99:
                    f5:3c:93:22:1c:0d:30:1c:49:7e:2b:35:18:3d:81:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FC:DE:D6:31:A3:76:30:29:57:74:80:63:89:21:2F:B6:75:35:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2098394d-aa00-36d2-9078-daaffcacb6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:86:9e:18:ec:c3:dd:6c:ce:bc:fc:3c:e1:61:a7:a1:2e:
         a5:51:7b:25:cb:68:c7:b3:17:3a:c1:c9:81:d4:83:13:d4:99:
         f7:62:7b:f7:52:f8:e0:b8:12:23:48:c0:6a:f4:e2:d7:ae:6f:
         c2:84:d4:ad:e3:ab:d2:15:1f:a2:f2:af:7b:24:3d:54:b5:d3:
         45:eb:44:d3:a4:7c:4c:b8:eb:63:3c:e5:c3:28:7d:fb:b1:07:
         ad:cf:fe:47:aa:84:93:cb:89:0f:01:2b:d7:1e:5a:d5:73:5e:
         4f:64:a0:71:b3:32:38:8e:77:b4:f3:10:d0:c4:4d:2c:95:ed:
         e9:d0:33:83:6f:75:03:33:b3:b1:ec:b7:9e:78:e1:55:23:54:
         37:f3:48:73:97:19:af:66:86:67:2e:0e:ae:8f:f1:27:b9:a9:
         65:af:ea:25:a3:52:d9:b2:75:68:13:b5:4c:db:d6:97:50:f9:
         02:a7:5b:fa:7e:52:b9:24:de:5c:08:23:3d:a3:db:ed:85:41:
         f3:c2:95:96:6a:95:9e:1c:7b:d7:ea:93:bd:2a:b9:94:46:10:
         70:a0:6f:d4:81:05:ac:67:5a:4a:b5:a0:2e:ad:07:fd:23:2e:
         6d:61:0a:9e:f0:95:75:31:68:ee:b8:b7:57:8b:cd:9b:23:93:
         70:af:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:22:22 2024 by rpki-client on console-ams.rpki-client.org