Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
File:                     a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa (raw, json)
Hash identifier:          y4iA5B91e9Cn6fFK0E1MK7OdWnXHIy5fWVrgtEaSE/I=
Subject key identifier:   6C:95:26:4D:E5:2C:D2:62:FE:3F:02:01:F9:CC:E3:C5:4F:65:75:54
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584543D7FFDDA2E654429E5E1D80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     212609
IP address blocks:        64.40.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d7:ff:dd:a2:e6:54:42:9e:5e:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=d2ef17ad-3585-4e79-8242-b84e2e6b4ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:6e:56:4b:ac:cf:02:bf:15:c3:ee:05:3d:
                    52:56:9b:6c:ea:a8:70:26:fb:d4:34:29:9f:a9:8f:
                    c0:06:dc:07:31:29:7e:a8:27:ae:1b:9e:22:30:14:
                    6b:c5:0f:48:b1:7d:e4:fb:bb:3f:cc:95:e7:03:94:
                    e7:41:4a:1e:c2:fa:7a:35:4f:46:35:14:5b:fd:35:
                    17:d4:2c:42:21:54:1e:bf:84:4f:9f:9d:9a:31:5b:
                    04:e3:39:e7:64:45:f0:c5:54:1b:88:65:2a:af:84:
                    71:1a:32:22:70:8c:18:b6:f0:44:89:e8:30:7c:0d:
                    07:6d:6d:78:e2:7b:1f:46:71:36:0b:b8:9c:ec:9a:
                    dc:38:a9:d1:2b:9e:dd:d3:f1:43:22:c9:6a:0b:cb:
                    01:ea:aa:2c:d4:37:c2:03:d6:ec:d9:1a:cc:e7:82:
                    6c:68:1d:0b:d7:b9:bd:eb:af:99:dc:38:30:0e:e7:
                    2a:c5:1c:c0:77:7d:2f:38:e6:14:06:80:07:e9:fb:
                    58:01:5b:a7:e9:b7:da:e3:1f:be:1b:46:95:23:7f:
                    28:bb:46:bf:4a:af:1c:0b:38:3d:e2:de:c7:ff:db:
                    5d:8e:fd:d2:f4:d4:65:41:28:ff:8d:9d:ec:44:cb:
                    ab:10:cb:9d:f8:db:ac:eb:70:f3:e2:48:74:31:e0:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:95:26:4D:E5:2C:D2:62:FE:3F:02:01:F9:CC:E3:C5:4F:65:75:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:e4:09:26:85:f1:7e:53:fa:d1:64:b0:97:f6:e7:fb:3d:
         4b:9a:c5:1a:ad:a2:25:4c:82:c4:2f:92:c9:f6:13:55:37:38:
         8f:2a:28:94:08:ff:f3:2e:dd:27:a8:d3:03:d9:8e:5e:ea:92:
         c8:82:ab:35:2a:8a:31:88:12:bb:83:a1:8e:58:b6:d2:ea:97:
         d2:27:e7:6c:af:eb:6b:78:98:9e:39:88:07:26:bf:c1:31:e7:
         19:d7:66:f9:83:de:57:0a:31:15:ec:0c:22:86:2e:cb:0c:62:
         8b:c5:7d:56:c7:1e:b0:bb:75:6f:4d:b2:73:29:70:20:7f:58:
         ae:4e:d8:2c:c5:99:2e:64:53:b2:d9:09:ef:f2:3e:89:d0:6f:
         f5:c7:55:eb:cc:c2:82:a9:00:c3:4c:35:d5:27:ce:80:03:46:
         83:a3:f6:2f:12:7c:83:a1:e0:fd:34:d2:04:3a:38:99:f9:d5:
         06:22:2c:dd:01:a4:89:5b:d2:b4:ea:c1:21:63:5b:e5:a2:21:
         3d:b1:a0:e7:c9:04:9b:fb:64:62:58:09:ba:8b:f0:9e:5e:53:
         53:14:be:81:ff:f7:07:54:20:90:62:a4:a7:ee:d5:70:68:63:
         26:16:b4:2d:a4:03:87:83:8d:ad:d5:15:82:b6:3b:4b:1c:1f:
         75:82:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:24 2024 by rpki-client on console-fra.rpki-client.org