Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/15d0b27d-b9cb-3a5f-afc6-4e6bed020676.roa
File:                     15d0b27d-b9cb-3a5f-afc6-4e6bed020676.roa (raw, json)
Hash identifier:          suoo2Wp232s0mwgjH3hQykF73s7GvxYq5wZdri3yQ7w=
Subject key identifier:   20:E4:3F:4E:3B:1B:4D:19:42:8E:41:30:6D:D4:5F:D5:58:25:7D:82
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285844F2FFFD708770C8F0D626A400
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/15d0b27d-b9cb-3a5f-afc6-4e6bed020676.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     14445
IP address blocks:        216.185.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:fd:70:87:70:c8:f0:d6:26:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=f2aaecd0-c395-49fc-9972-52aabd689dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:37:f1:83:3d:3a:b3:24:45:16:77:4d:2a:
                    35:4d:be:16:34:5f:77:7a:74:9a:02:08:f6:61:58:
                    b3:ac:19:b6:95:35:d4:01:79:bf:ff:29:89:df:37:
                    8a:00:69:9c:76:5e:df:72:3e:0f:b7:76:ce:51:07:
                    17:8a:d9:b6:60:1c:b2:67:8e:ee:7f:28:c6:3d:a0:
                    11:c4:2f:e8:9b:48:74:b0:50:e2:2c:5c:e7:b9:db:
                    98:59:83:71:30:fc:fa:f5:fa:9b:95:74:02:6e:50:
                    00:32:71:81:07:fb:d2:41:ee:af:a9:f0:f6:14:c8:
                    27:73:cd:c0:9e:74:56:3f:c6:27:26:71:4d:4b:6e:
                    44:c4:98:03:7f:5a:6b:5a:97:26:df:e2:b6:1f:e1:
                    b2:29:99:96:32:93:29:2f:be:fb:13:f1:c1:53:7b:
                    26:12:f8:1b:15:47:de:22:a9:9b:dc:05:8f:dd:aa:
                    fa:cf:08:75:c0:e7:39:bf:84:11:11:63:ce:a4:a1:
                    d1:7c:07:21:a2:2f:6a:cc:cd:59:3e:a1:5d:ac:65:
                    c4:7e:2c:ac:f7:3e:f8:85:c2:e3:2d:67:fd:6b:e7:
                    78:b2:cc:71:6e:c7:2b:de:c7:84:61:62:16:7b:79:
                    3a:e6:c3:0a:15:8f:1b:14:15:d7:5b:9e:d2:e9:47:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:3F:4E:3B:1B:4D:19:42:8E:41:30:6D:D4:5F:D5:58:25:7D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/15d0b27d-b9cb-3a5f-afc6-4e6bed020676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:57:db:6a:43:9a:32:8a:0e:a2:bb:3d:79:9a:3d:c5:a4:6e:
         fb:31:4b:60:1a:e5:5e:ec:fe:0a:ca:f3:8f:3c:51:a9:e4:85:
         ea:ee:d0:d8:8b:8b:88:fd:42:4a:74:a1:7b:7b:cd:16:a0:47:
         45:dc:ba:62:73:da:c8:18:8b:bd:62:4e:c1:8d:04:57:04:4f:
         18:70:1f:6c:02:b1:a1:e8:6f:53:00:b0:28:b5:6d:a0:8e:a4:
         85:79:e8:b2:90:f8:c6:ab:dd:0c:3e:e3:09:a7:d7:4c:a5:2a:
         44:8e:dd:8d:b2:ec:b7:7e:75:d9:e9:14:c2:79:d5:40:0d:f4:
         8b:87:21:14:4d:ff:db:86:ea:a0:00:63:de:db:90:09:22:f0:
         3e:03:cb:90:20:73:9b:b6:a3:de:88:ba:19:44:0e:40:ef:78:
         43:da:6c:61:a6:cb:19:6f:0d:20:73:6b:20:8d:4b:a4:a3:06:
         b7:23:3b:c6:1c:92:96:b9:7d:c8:38:f0:f9:89:92:3f:67:4f:
         49:87:35:09:4d:a1:60:30:42:2c:ef:0a:c1:3e:b4:6e:cf:38:
         3f:d1:a5:08:b9:14:03:02:aa:44:e9:78:18:41:83:e4:05:53:
         b1:de:59:e0:93:21:f9:05:b8:1e:8b:50:47:51:49:7e:07:bc:
         3d:31:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 10:11:17 2024 by rpki-client on console-fra.rpki-client.org