Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa
File:                     702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa (raw, json)
Hash identifier:          ZPMZZiKNciLjzFxu7htzV/6j3zWb+Bq/Bu33/xifjs0=
Subject key identifier:   95:CD:AB:46:8D:B5:CD:85:7E:7B:07:14:AA:B1:57:DA:69:57:A6:AC
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F43285845CE09077FDB4D3F8340BB4240
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     396204
IP address blocks:        205.143.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:07:7f:db:4d:3f:83:40:bb:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=198c4bed-32c8-4fea-b6fa-e7a36991e74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:9d:a4:db:07:49:b3:56:c1:05:ce:f9:02:
                    a2:21:f0:b0:65:fd:46:cd:cd:57:18:56:3f:a8:16:
                    fc:7e:e5:5c:b1:88:a8:d5:da:7b:b0:5d:7d:f1:b2:
                    fb:b0:01:79:1a:20:e2:96:d1:23:15:ae:24:d9:0e:
                    47:38:72:63:b7:19:63:86:b4:cc:34:78:13:7a:b2:
                    db:61:e4:a1:44:43:51:4f:4b:ae:bb:dd:22:51:e6:
                    86:62:64:d1:20:7d:d0:36:6d:d1:4b:99:a5:87:95:
                    52:fc:36:0a:58:03:9f:89:75:81:7a:32:78:8c:99:
                    75:a8:56:df:30:74:1f:61:17:f3:19:74:de:96:4c:
                    6b:dc:95:16:a8:c6:69:1c:73:66:39:8a:03:c7:3b:
                    17:98:b5:9c:18:38:ce:c8:18:ef:e2:bb:d4:09:6e:
                    6b:c8:6b:80:74:05:f3:6f:f9:15:a0:44:fa:84:43:
                    d3:67:ec:89:ca:04:8b:85:37:03:d9:03:03:62:a1:
                    51:93:c1:7d:64:f7:9e:da:96:76:7f:ba:2a:a2:a1:
                    b4:35:6d:6e:fe:56:17:cb:f2:24:29:45:bc:50:3f:
                    f3:52:11:42:1b:cb:c4:37:ce:14:e6:7f:a4:6d:92:
                    b9:a8:5e:4e:61:1c:cc:84:38:97:0e:47:ff:20:72:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:AB:46:8D:B5:CD:85:7E:7B:07:14:AA:B1:57:DA:69:57:A6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/702503a1-3a5f-3cf8-a7ab-b43e7d514d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:8d:d7:94:a1:19:3c:51:11:cb:76:01:c5:41:c8:60:06:
         b4:95:51:6f:27:60:19:19:9e:69:e0:69:db:44:63:f5:64:73:
         9c:68:02:47:9b:6a:27:fd:86:f8:60:c2:ad:ae:ac:42:83:93:
         f2:7d:3b:9e:d5:a5:60:8f:3b:06:23:76:39:bd:13:a8:e8:ad:
         59:bb:10:c8:c0:af:5c:1e:d6:5f:d8:9b:69:46:8d:b6:d5:c9:
         c9:25:0f:6b:d2:6c:c6:fc:fe:e1:5e:4d:7e:e2:1f:66:29:74:
         5c:46:a5:09:cf:97:bf:5c:36:1a:d4:30:6c:a0:30:f3:f7:26:
         1f:2c:e2:a9:d0:ef:21:ad:3b:20:e6:21:ca:3a:ad:ad:fe:43:
         01:46:c0:83:1e:88:eb:15:5f:8c:6a:27:67:01:d3:e6:19:74:
         ee:41:ee:fc:75:4e:a5:e6:15:5f:15:e4:af:81:d3:43:5c:49:
         ae:d8:64:53:0f:fa:5e:37:c2:13:0f:86:70:e7:b5:4a:e3:86:
         c9:93:fd:5a:c5:1c:03:10:a1:e2:4e:66:ea:a0:a9:ba:3d:2d:
         7f:3f:11:f7:f6:81:c7:eb:f5:bd:5f:6e:13:54:ed:6f:09:40:
         ac:7d:90:d4:6b:06:33:06:41:ef:b8:36:ef:3a:8f:cc:e7:5e:
         4e:0d:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:50 2024 by rpki-client on console-ams.rpki-client.org