Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa
File:                     96c3ceef-7277-31a2-b662-83d269d30f16.roa (raw, json)
Hash identifier:          npdqng7HA6jm+A4ZTbb+AoPmuuoJy5sq+6IvLnjLwNI=
Subject key identifier:   EB:7F:0C:28:BF:0C:A4:90:FF:FA:A7:37:25:3F:F5:F7:99:6C:0C:C6
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A4889B7309140C2978559C0
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     1280
IP address blocks:        204.152.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:89:b7:30:91:40:c2:97:85:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=85d8d679-69b1-49db-afa0-0479181b74cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:69:23:ea:dd:a3:db:a9:f3:29:d3:dc:8e:
                    01:16:48:ef:d4:82:4a:ea:91:70:d3:8c:cb:84:70:
                    7a:8c:76:8a:d2:67:32:d7:9f:b8:b4:00:0e:77:8a:
                    51:22:ea:35:fa:55:29:68:79:37:68:35:b0:c1:6f:
                    e2:ea:99:80:54:af:a1:f2:76:27:db:58:fe:3c:b5:
                    31:b1:bb:cd:f6:04:90:f2:0d:d8:d5:fb:fd:89:9c:
                    a7:3f:96:40:a0:fe:c3:c0:71:79:73:45:80:b5:af:
                    39:09:30:94:12:73:67:f1:b5:34:32:22:21:d1:59:
                    d0:fa:e0:9b:ff:7f:b7:ba:bf:e9:fb:33:d1:53:a4:
                    8d:f0:a5:ff:fb:97:c2:f6:c5:fd:f7:e1:31:c6:24:
                    7f:46:bf:4c:0b:4c:4a:5a:cc:9c:ca:fd:00:a4:d8:
                    ab:93:41:0e:15:05:15:31:f1:c8:1b:0c:42:7c:7f:
                    76:6c:32:ed:b1:20:76:6a:19:3e:ae:1f:de:d8:53:
                    5e:fe:69:0d:d2:43:a2:45:df:b9:a6:9a:bc:39:34:
                    84:50:b5:fc:8b:49:4c:6a:98:42:47:c0:2d:1e:0c:
                    d1:3d:12:5f:59:97:f1:04:1d:0b:a8:00:68:85:ba:
                    89:d0:cf:46:d1:c2:49:f0:29:bf:00:2b:ce:f4:4c:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7F:0C:28:BF:0C:A4:90:FF:FA:A7:37:25:3F:F5:F7:99:6C:0C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:96:cc:7c:d8:5c:2e:ec:13:63:05:2a:a7:11:4f:6d:24:
         1e:b5:bb:e8:f3:73:2d:18:cb:de:d6:17:a9:90:71:46:4b:a4:
         f1:35:aa:5d:c0:0e:29:be:42:31:d0:b0:3c:89:63:a3:41:b5:
         39:31:f3:45:1b:1b:5c:ee:f5:05:6e:a2:5d:32:b4:56:0a:ca:
         16:42:17:97:23:85:f3:b6:a1:1d:eb:6b:80:10:05:ed:82:3a:
         c2:1e:31:40:11:a2:1c:84:ec:64:e8:02:c5:03:fe:31:a4:be:
         fc:83:14:e8:7d:33:74:b4:00:96:bf:98:87:05:74:93:75:c5:
         0f:25:64:c4:c8:63:d9:65:65:00:88:fb:75:c7:8f:4d:78:a8:
         bb:b3:e9:9b:89:a4:4e:95:c7:6b:99:cc:5c:f5:a6:36:29:b8:
         e7:06:58:74:c6:dd:41:48:10:57:66:f3:c3:02:69:5e:05:1b:
         32:1b:64:5c:a3:a6:fc:6a:b9:82:56:d8:e9:28:a2:02:5c:98:
         2a:d5:fc:6b:54:48:98:e9:22:18:fc:52:f0:67:5b:44:8d:12:
         90:d2:11:f2:4b:7b:79:6c:25:63:0f:cc:b5:ec:7f:89:e9:75:
         0c:c3:1a:61:54:6e:40:d8:4c:e1:c7:ef:cb:d2:39:2a:55:00:
         03:23:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:16 2024 by rpki-client on console-fra.rpki-client.org