Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa
File:                     645aeec0-b007-3912-969c-643e5e0a0cd2.roa (raw, json)
Hash identifier:          X/fterCQuQsulXSJmsyjFQ8IK0sn7PmnSKQ2i1ot+d8=
Subject key identifier:   25:33:A8:81:CE:DB:13:67:31:BF:1F:03:9A:DA:A5:F6:7E:60:A2:A6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FD397D1D6C8CD04BFE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     17359
IP address blocks:        199.255.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fd:39:7d:1d:6c:8c:d0:4b:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=0a36331a-88ff-4f1e-b6fa-54e3d0d7bf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:c2:c0:5f:3f:8b:5f:ed:44:c7:41:a0:5d:
                    81:04:56:81:58:85:85:46:bc:6c:16:1d:8b:b0:90:
                    12:29:7e:96:0a:42:da:57:76:cf:39:72:44:b0:c5:
                    a8:fe:ba:60:40:c9:5e:38:72:6c:cc:8c:9b:0f:9c:
                    47:a7:a3:50:81:02:96:cd:8b:eb:2a:d4:b7:b6:3b:
                    7a:d8:bd:00:4f:69:1e:49:c0:34:c0:b3:33:fb:f8:
                    4d:df:e6:17:4d:27:c1:69:d4:eb:09:96:3f:2b:5d:
                    ac:6a:46:d0:8f:a3:39:1b:36:45:54:97:71:2d:eb:
                    59:7c:ae:a0:f5:10:33:c7:09:39:11:59:88:78:fe:
                    01:55:6e:83:3b:c4:79:a0:82:85:d9:f2:30:82:f8:
                    f5:a9:00:2d:be:b9:f0:e3:73:84:d3:a4:3e:22:9a:
                    68:49:f2:b9:a1:4d:88:ce:24:38:ce:54:0e:a2:c2:
                    26:34:2a:f6:69:89:1a:ff:2e:fc:81:22:34:62:f2:
                    83:68:3e:ea:83:71:10:fc:9c:23:80:0b:6f:23:30:
                    c0:7e:77:07:32:9f:c4:e5:b8:d2:b3:ce:ca:56:af:
                    71:1f:89:6a:23:1d:bd:62:ec:78:66:ff:f9:05:fe:
                    39:22:9a:24:1f:e7:dc:50:2e:78:e2:7f:f7:06:5d:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:A8:81:CE:DB:13:67:31:BF:1F:03:9A:DA:A5:F6:7E:60:A2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:a6:eb:fe:7a:3b:ca:32:2c:ca:86:bd:4d:2f:75:ee:2b:
         45:a1:35:2f:d8:49:b7:25:98:98:21:1a:0d:6d:32:df:06:df:
         fe:89:f4:40:ab:34:4f:fd:21:e7:89:93:6f:4a:00:b6:fc:86:
         76:df:4e:01:a6:98:a8:3d:f6:a6:9a:be:0d:ff:6e:5c:3b:d4:
         14:04:d3:e0:9d:44:21:c0:10:58:5a:6e:08:6e:bd:7e:0b:41:
         c6:67:45:97:8a:30:e1:cb:46:ad:e9:c1:a7:b3:6b:21:50:5f:
         70:74:f7:00:04:99:cc:c0:5e:d1:dc:17:52:b7:a9:9d:62:2a:
         90:4d:32:c0:e3:67:d1:cc:1f:d0:4b:fa:a8:26:69:81:33:27:
         11:f2:80:a5:b7:5e:b1:15:40:ad:98:17:44:94:cc:bc:12:82:
         b9:a8:dc:15:71:01:e7:6b:00:b0:59:5b:b2:4b:97:5d:91:5c:
         88:66:14:39:16:74:89:a8:ec:d4:7f:69:8f:2e:9d:92:24:cd:
         e1:ac:76:64:d7:ae:7f:c0:c2:bc:d3:16:4e:2d:93:89:4a:30:
         79:ea:1b:87:a6:70:91:21:a2:47:a0:63:65:70:7e:88:9e:25:
         14:a7:ec:30:c9:b1:a8:66:ee:91:f6:e2:42:ec:68:32:c6:e8:
         ff:06:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:15 2024 by rpki-client on console-fra.rpki-client.org