Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa
File:                     fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa (raw, json)
Hash identifier:          O4+1RyR3cDd2rBaTTU+jl8NJsgmhkMd23dwt+x5cGBU=
Subject key identifier:   85:6F:8D:5E:87:EB:57:E2:91:29:CE:45:0F:21:02:A5:E0:96:73:18
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462A608BF47352D3BF400B00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa
Signing time:             Wed 20 Mar 2024 20:58:03 +0000
ROA not before:           Wed 20 Mar 2024 20:58:03 +0000
ROA not after:            Tue 18 Jun 2024 20:58:03 +0000
asID:                     36040
IP address blocks:        208.117.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:60:8b:f4:73:52:d3:bf:40:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:58:03 2024 GMT
            Not After : Jun 18 20:58:03 2024 GMT
        Subject: CN=db81e8d6-1f93-42b2-89fc-9713a1c05657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:b3:df:22:d3:ba:f9:0b:88:83:40:80:6f:
                    44:7f:1e:06:8b:7f:43:0d:17:17:50:95:4e:66:83:
                    33:41:0b:ed:44:4f:fd:6e:9f:ce:0b:60:49:b6:38:
                    cd:66:2f:ed:cc:d9:1b:54:f2:27:e3:7b:c3:9d:45:
                    58:6c:5e:12:ed:4c:21:ea:cb:ad:cc:f3:c0:84:94:
                    4a:7f:26:2b:b8:f2:7e:bb:64:24:a2:67:0d:a4:98:
                    2a:ab:fc:f1:22:02:a5:bd:47:7e:93:17:93:63:b9:
                    b5:a7:c8:67:51:1d:fd:fe:2e:3f:7c:fd:ce:64:c4:
                    ed:1f:80:c4:43:49:35:46:2b:1f:16:1b:7f:93:b2:
                    e8:6f:b9:01:2e:19:8d:ed:54:6a:35:3f:63:e6:90:
                    63:7b:67:15:4d:53:84:d7:9a:75:8a:17:c4:24:c9:
                    5d:b2:b3:3a:b8:67:35:ea:a0:76:cf:fa:e6:7b:b6:
                    43:c6:bf:9b:07:e2:47:97:6c:3e:01:c7:1a:07:d6:
                    5b:59:b4:2b:0a:26:69:2a:b0:66:a1:f7:06:e8:37:
                    3a:8e:3d:10:15:b3:4e:f5:68:43:e8:e8:d8:ab:15:
                    5c:62:36:cc:dc:38:26:46:4f:3c:67:bf:bc:e9:e1:
                    d2:e2:7b:45:38:5a:1d:e1:64:a2:aa:65:2c:04:21:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6F:8D:5E:87:EB:57:E2:91:29:CE:45:0F:21:02:A5:E0:96:73:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:74:3d:48:35:47:7e:a2:56:ac:b7:9d:5a:d0:42:29:5b:92:
         bc:3e:f1:c7:49:98:7d:dd:7e:00:b2:6f:de:82:15:ca:8e:f6:
         10:d5:23:d8:ce:63:ef:60:d6:85:bf:66:0e:fc:1d:ab:cf:7e:
         21:a5:4b:4e:fe:89:c4:d4:c3:fe:8a:39:e4:f5:e5:25:e6:04:
         9a:1e:48:46:ec:87:ba:74:67:f2:4f:6a:18:e3:4f:db:f7:b7:
         46:c5:86:38:ce:cb:62:17:73:98:d4:5c:00:b4:5e:a3:1f:d8:
         40:28:43:03:f3:a4:b6:19:4b:47:f0:3e:14:27:7c:4f:c1:4a:
         99:70:87:fa:45:f1:79:11:ad:8c:f3:c9:08:b8:98:67:fb:24:
         4a:1b:22:b5:f3:7b:9a:77:81:9b:9b:77:b9:20:16:ab:a0:7c:
         81:84:65:6f:31:ab:f1:54:23:ee:7e:56:85:7e:f5:30:c4:61:
         8e:6e:2d:c9:8d:10:03:50:4e:6f:d5:f8:e5:e9:0b:4b:c5:8e:
         e4:bb:75:f0:7c:84:cf:81:bf:7a:23:7f:e2:fe:7e:59:2b:0d:
         e5:72:57:c5:c8:3d:21:44:8b:83:c4:88:73:9a:52:f4:56:00:
         61:11:26:a9:1e:35:1c:1a:50:a6:9b:67:ea:25:76:83:58:10:
         8d:31:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:40:29 2024 by rpki-client on console-ams.rpki-client.org