Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
File:                     85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json)
Hash identifier:          QkIUOh3YzIABCaADLxj1ycNDcObKjZlkCdqFkF+jppo=
Subject key identifier:   5E:7D:B7:92:9D:75:DE:AA:6B:CE:8A:12:D7:9C:1D:5D:68:E0:9F:69
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F43285845AB234F72729323D043087380
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     64243
IP address blocks:        205.213.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:4f:72:72:93:23:d0:43:08:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=c6620f13-be55-4bf2-bf55-471dbccd8797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:d2:a1:db:21:49:06:82:85:22:45:6f:4a:
                    90:c5:db:c8:94:d4:db:af:69:5a:f6:26:24:7d:45:
                    65:b4:b7:04:cd:df:2c:1d:cb:6d:14:7a:d5:e8:2d:
                    5e:94:1d:5e:82:e6:ba:6e:f0:bc:c1:b7:5b:25:57:
                    a1:57:13:d8:66:ef:37:a7:ce:f5:fc:bf:e1:a6:ec:
                    3a:00:e2:76:54:fb:19:0a:1e:09:19:60:5b:02:9a:
                    3f:62:93:38:25:35:cb:7e:8b:7a:a8:5d:1f:cf:36:
                    83:da:44:df:97:c0:7c:dd:80:13:3f:20:6f:43:83:
                    81:82:3c:84:4c:ef:ed:d6:4c:4f:52:59:88:1c:1d:
                    16:83:51:b9:98:ea:49:c1:82:d8:0c:fd:3f:d8:70:
                    8e:04:66:1a:ad:20:b4:4f:38:41:8d:27:e4:d1:4f:
                    8f:8a:cc:3e:57:42:83:57:5d:f9:67:5c:a3:91:09:
                    0e:9d:2d:f1:c7:ce:d9:36:05:51:06:47:ff:f0:0d:
                    99:b8:93:6d:2a:92:0e:ee:83:62:ab:57:5d:c2:74:
                    47:6b:10:4c:35:32:53:7e:b5:48:54:e0:17:e3:bc:
                    12:13:9d:3d:05:6b:07:50:d8:84:9b:a2:53:88:e2:
                    17:46:9e:06:e0:ef:dd:85:59:bf:8b:98:30:e6:f0:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:B7:92:9D:75:DE:AA:6B:CE:8A:12:D7:9C:1D:5D:68:E0:9F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:7e:69:b1:b3:5f:f0:f8:30:cf:e3:e8:a4:0b:95:f3:eb:
         26:c0:b2:8c:f2:b4:99:c2:03:70:ef:f7:a6:da:7a:24:dc:90:
         b6:a5:b6:bf:62:c3:a2:c3:e9:1f:56:56:25:25:c2:0a:08:5f:
         14:7a:08:90:eb:f4:95:b6:8a:14:06:d0:76:fa:2e:8c:3e:d9:
         5e:b1:85:e5:16:79:5e:b2:d6:ea:cf:e2:16:d7:2d:5d:2e:a8:
         ab:bb:e7:ab:8b:ec:13:de:78:89:77:9b:8e:27:a6:13:37:b7:
         9a:e1:2c:4b:c0:5d:a4:99:a8:73:7b:83:63:96:9f:0e:6c:b2:
         42:e4:1c:2e:fe:99:e5:c2:45:94:55:27:72:33:46:0a:50:f4:
         59:f6:61:2b:7f:dd:19:ca:30:bb:a1:7e:06:11:c5:97:fc:ce:
         91:ab:f3:1f:46:71:19:2d:9b:fe:17:9a:90:b0:ba:46:08:ce:
         dd:99:c9:fc:af:8b:2f:1a:b1:45:1a:10:05:1c:47:d0:79:ec:
         18:a6:57:97:ce:5d:42:cf:81:34:a7:0a:14:55:90:91:5e:42:
         58:d6:42:e0:14:7b:1c:11:9a:eb:e0:e3:d0:99:95:a0:b1:ed:
         b2:0f:3e:41:11:65:32:8d:12:70:06:15:ac:bb:66:31:16:9b:
         8c:90:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:50:32 2024 by rpki-client on console-fra.rpki-client.org