Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/aa5a1ca7-adcd-3d1d-87cd-91519a825b47.roa
File:                     aa5a1ca7-adcd-3d1d-87cd-91519a825b47.roa (raw, json)
Hash identifier:          p4kaZlEPzhCZUF6KGzxs2bLRlvEokfiVf0Ur2BiTBdw=
Subject key identifier:   B1:EB:89:42:B9:42:16:CD:8E:10:5E:87:B5:5E:5E:E0:24:17:31:1F
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F432858457A48890672EE1091A9C71260
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/aa5a1ca7-adcd-3d1d-87cd-91519a825b47.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        207.230.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:89:06:72:ee:10:91:a9:c7:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=09a0cf14-d826-44a1-a1a4-6eaf712c8c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:72:92:95:47:1d:33:09:e8:e6:e3:96:90:
                    93:f7:d7:dc:38:1d:77:ab:bc:47:41:16:d9:5d:4f:
                    95:17:ee:dc:24:15:f9:55:f8:2b:55:ed:ac:03:20:
                    5f:3c:ad:a1:f7:65:e4:df:b6:31:26:4d:96:dd:ba:
                    3c:69:9e:67:cb:f6:cb:66:21:4e:30:89:34:6b:39:
                    d7:73:a6:6d:6b:b1:f8:ef:61:95:6d:f9:32:7f:ea:
                    6c:6d:a3:cf:61:45:c4:d5:0d:2f:e8:43:e4:a0:86:
                    e4:e2:d3:2f:58:03:28:87:62:b6:ad:85:5a:66:db:
                    fc:37:0d:5c:6a:76:65:6e:b5:44:9e:58:a0:aa:6c:
                    65:12:40:92:f3:21:f8:12:01:ff:47:4f:3a:12:bf:
                    3c:d9:dc:c2:9c:cf:6b:4a:08:7d:70:6e:1b:77:8b:
                    82:ab:d1:0d:76:b0:93:4a:ec:bf:05:22:c6:89:97:
                    19:f8:73:91:e7:e8:bc:2f:7a:b2:d5:68:91:d1:54:
                    bd:0b:68:33:49:98:a9:24:54:30:f8:53:c1:74:f5:
                    52:37:aa:01:9d:31:3e:de:91:a7:3d:fd:02:bf:d7:
                    5a:e3:42:bd:85:be:d0:f6:3d:b2:06:b1:de:b8:a2:
                    d6:33:c5:00:f5:4f:dd:a8:71:32:48:8a:6d:1a:e0:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:89:42:B9:42:16:CD:8E:10:5E:87:B5:5E:5E:E0:24:17:31:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/aa5a1ca7-adcd-3d1d-87cd-91519a825b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:85:f9:59:d8:47:00:57:1a:db:84:d3:87:2f:c4:ec:6d:
         bd:a2:73:05:28:bb:48:46:18:c1:41:64:bd:3c:c0:6e:af:9d:
         70:d3:e7:ce:04:fb:4b:12:68:c5:9e:f5:29:57:36:46:15:ec:
         1a:ef:9f:4b:74:14:7f:99:d2:41:1b:9e:8e:13:ac:69:fe:94:
         7a:84:16:f2:06:61:b5:9d:01:00:de:1c:46:c9:50:27:88:29:
         bb:c4:a1:21:5f:ed:b6:f3:cd:97:cb:b4:bb:0f:49:3d:67:a4:
         72:fb:07:5f:18:62:79:a4:4d:21:19:4d:e7:05:eb:6b:fd:e9:
         bc:a9:37:b2:06:f9:84:f4:12:28:af:9a:ba:31:83:ad:98:c9:
         d1:be:88:ad:6f:44:3e:64:a7:15:7e:fb:4e:b3:4e:00:6c:19:
         08:c5:db:5c:2f:83:c0:e4:c2:fa:e1:d9:37:bd:52:e5:cf:21:
         8a:37:59:a1:b8:91:38:b3:f8:c2:08:49:26:1c:3d:42:c0:57:
         0c:11:0b:cc:48:1e:15:a2:d8:69:ad:c9:70:6b:4d:ab:a9:e2:
         4d:cd:cb:ea:7c:8e:f1:9b:a4:c8:fe:da:2f:69:bc:4b:92:7b:
         a5:ee:36:a5:a2:13:20:a4:51:8f:94:2e:8a:54:60:b0:59:45:
         08:62:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:28 2024 by rpki-client on console-ams.rpki-client.org