Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa
File:                     119725c3-7279-3b5c-bc1e-05a462651ad0.roa (raw, json)
Hash identifier:          yROi6VsSX9pclVpyEO4+wg4KrDjdFHaNDh2RNshsOqY=
Subject key identifier:   6E:9C:95:5D:BD:E8:19:70:34:7E:EA:B7:D7:4A:87:DB:7A:0B:6F:66
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F432858454C380E68E8BEBCD1FBD76380
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     10753
IP address blocks:        204.9.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0e:68:e8:be:bc:d1:fb:d7:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=0d919ae0-e280-4632-a617-c4c4e3ebeb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:1d:7e:22:db:bd:13:de:57:15:c0:23:23:
                    c4:b1:d1:3f:8e:fa:20:9e:98:cd:e9:f0:d1:a4:7d:
                    74:8a:4d:91:06:b4:ec:2c:ec:ee:88:3f:10:81:cb:
                    4a:bf:9d:7b:aa:35:88:8d:89:cb:06:2d:e7:b7:ab:
                    2c:fc:16:57:84:c9:c2:d3:fc:7a:e2:1a:74:b2:5c:
                    df:23:66:8e:13:cc:31:9f:4c:42:2b:b9:5c:d7:c0:
                    7c:ac:fd:df:7b:3a:bc:78:47:f4:10:58:6f:5d:c6:
                    4e:56:12:b4:50:6c:bf:a3:df:3b:8f:10:1e:4f:78:
                    c7:6a:0d:84:f1:dd:26:c5:75:b8:de:1a:4d:d2:cf:
                    67:41:2f:b6:84:f6:40:da:d9:52:65:55:b4:3a:81:
                    69:e3:91:31:3a:51:a5:5b:54:9a:09:14:3f:19:ea:
                    77:50:9e:ab:0b:e7:a3:c5:b3:e0:88:80:ce:d6:dd:
                    79:08:d9:90:87:1d:91:00:c2:39:3d:05:6e:e7:69:
                    5b:c8:2c:cf:d9:3a:41:1f:a6:60:d4:6b:17:a1:3d:
                    12:d5:db:98:4a:83:8a:97:99:12:d0:f3:34:ad:0d:
                    ba:23:42:33:28:05:19:1c:20:17:37:81:09:12:65:
                    16:46:32:2c:86:1b:f3:d7:0f:4d:65:8c:80:5f:02:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9C:95:5D:BD:E8:19:70:34:7E:EA:B7:D7:4A:87:DB:7A:0B:6F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/119725c3-7279-3b5c-bc1e-05a462651ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:d6:5a:f0:31:77:c5:c4:41:e5:d9:fe:36:95:77:48:cc:
         c1:f4:de:0a:01:ae:f8:a3:9a:87:70:69:76:f6:5b:dd:17:bd:
         f9:eb:2d:0e:5c:0a:da:84:a5:af:64:4b:f6:b9:a4:3b:83:cc:
         99:fc:00:25:b6:87:d5:79:1c:fe:e2:89:0a:f4:5c:b0:70:91:
         21:69:96:b0:91:a7:ad:30:0c:5c:70:91:4b:55:7e:5a:d6:44:
         9b:28:f5:09:bb:7c:24:99:ee:fe:da:4b:06:3f:4f:39:ff:4e:
         12:e4:88:c8:5e:c9:4d:09:97:a5:1f:cf:7e:df:2c:f1:a5:9a:
         ad:96:7f:42:7c:3e:f5:4a:6e:e3:69:71:80:c8:9e:0c:d5:a4:
         5e:1e:13:42:8b:58:fc:06:ac:43:d5:78:09:d9:70:03:d9:7f:
         ea:10:22:0e:d8:51:64:24:de:12:4b:df:a9:4a:3f:84:e8:98:
         48:1e:21:ef:c7:e5:48:58:5c:b9:bf:0b:4e:67:2f:d6:7d:d2:
         17:0a:21:bf:e3:69:6e:5b:a1:c9:9a:5a:0d:bf:7c:69:3e:18:
         a6:68:ce:01:93:73:80:32:62:54:36:e5:2d:f8:a1:13:3d:c3:
         e9:12:da:45:bb:32:6c:65:58:da:9b:2d:fb:05:82:91:7d:76:
         64:bb:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:18 2024 by rpki-client on console-ams.rpki-client.org