Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa
File:                     e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json)
Hash identifier:          w7dzVr2GgK+x0JvBz1yrbI5EyjNtx0lI5Wkdd7Dl6ek=
Subject key identifier:   9F:BF:C9:FB:1F:86:DF:A7:DA:43:D5:1E:08:CC:2A:86:26:5A:CA:85
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F43285845B21E2C66244D6BC52A94D600
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        209.236.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2c:66:24:4d:6b:c5:2a:94:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=ddda15f3-ec35-4024-bb90-55a2d5df389d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:52:29:11:37:e3:3f:55:e9:90:64:af:57:
                    00:fe:14:f2:c0:20:dd:1f:bd:66:d9:bf:56:ca:4a:
                    3a:b0:47:12:f0:20:ce:c7:30:af:e1:10:4d:6e:30:
                    d4:19:b1:f7:9c:66:d5:95:8e:1e:93:30:37:03:b7:
                    d1:10:98:a1:21:bb:ed:4f:c1:1c:de:77:ea:e8:08:
                    5d:12:99:ca:25:30:e1:f0:1f:a3:e0:61:b2:0e:bf:
                    99:bf:9e:e0:dd:ed:5a:74:30:ff:ac:d8:0f:8f:3a:
                    36:66:d5:eb:96:33:a5:ca:93:84:e8:1c:64:e8:3a:
                    a0:71:90:51:46:c1:7b:8c:2f:a9:d5:9f:d9:d7:32:
                    a0:b4:d2:9d:af:3f:67:40:5f:b6:94:12:84:ee:79:
                    66:eb:13:2b:af:5e:7c:bd:4b:07:77:d9:26:cf:b6:
                    b3:54:3a:20:c2:d0:f3:ab:30:a5:a0:c4:5c:77:ca:
                    45:8d:dd:16:c9:29:aa:04:d2:19:19:7f:35:ad:11:
                    60:29:49:1e:b9:e9:b3:f3:a0:7d:22:6a:0e:1d:4c:
                    94:4e:a9:7b:aa:7a:6d:10:cc:57:91:cd:ab:f5:d2:
                    32:d0:ed:b8:f3:3f:2f:00:7c:b6:42:f7:74:b9:e1:
                    a9:33:f5:2f:3b:0d:67:65:eb:b8:3f:7c:2a:f7:a3:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:C9:FB:1F:86:DF:A7:DA:43:D5:1E:08:CC:2A:86:26:5A:CA:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:64:79:48:ad:4a:85:ce:62:00:9c:56:66:8a:2a:04:3f:6c:
         55:76:88:13:ba:69:6f:80:2c:30:38:2b:08:e0:4c:91:d5:2e:
         cf:e1:e4:99:3a:d6:22:1f:83:b9:2e:39:e7:78:d3:7e:c4:e0:
         d6:8e:07:b9:e8:fd:21:bc:76:8b:fa:bd:02:09:51:85:3a:6f:
         9a:96:60:fc:32:24:34:8a:f9:12:7c:97:02:e7:17:cf:e5:40:
         d7:d0:17:d3:2b:00:2c:a4:4b:f4:26:e7:35:bc:69:14:d5:42:
         29:72:a0:e4:f9:3e:60:62:39:f3:c7:ed:5a:eb:6a:7e:25:03:
         55:ac:b6:e5:30:73:3c:fe:39:c3:be:20:a7:aa:73:5b:7b:71:
         b7:fa:4c:0c:60:f8:6e:ac:2d:b5:04:20:59:56:e0:29:6b:50:
         6d:6b:bb:af:af:55:c7:9b:90:52:06:03:d8:f1:30:66:73:fc:
         25:02:78:b1:82:bb:9d:49:93:1f:67:f3:43:2f:49:1c:32:22:
         90:c3:97:27:60:16:e7:ca:be:89:83:58:f4:95:b8:e3:21:00:
         1a:e0:1a:77:56:5e:28:e6:58:7d:4c:02:21:5d:d5:1c:c1:b0:
         26:65:fc:39:83:2a:bd:97:93:7e:27:d9:79:3a:61:46:3d:59:
         1f:3c:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:02:38 2024 by rpki-client on console-ams.rpki-client.org