Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9468bb5-ab0a-30f4-9c29-d137d71e6311.roa
File:                     b9468bb5-ab0a-30f4-9c29-d137d71e6311.roa (raw, json)
Hash identifier:          suMBoj3EH4cFCrY8EkqsP7fDj2+3eIK06i1fp5Bq0/U=
Subject key identifier:   0D:93:42:9E:19:E2:C8:7C:CD:94:A7:9B:9D:BE:1E:FE:FA:0F:5C:8A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838E3DAAA2C3FD8BEB561D9C080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9468bb5-ab0a-30f4-9c29-d137d71e6311.roa
Signing time:             Tue 09 Feb 2021 05:00:00 +0000
ROA not before:           Tue 09 Feb 2021 05:00:00 +0000
ROA not after:            Tue 02 Feb 2027 05:00:00 +0000
asID:                     17359
IP address blocks:        199.255.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e3:da:aa:2c:3f:d8:be:b5:61:d9:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb  9 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2027 GMT
        Subject: CN=18e6a6f0-1cdb-46e3-8170-0d3ce557026e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:e2:d3:46:87:f8:1c:eb:99:7c:cb:93:32:
                    19:a7:bd:10:72:f7:a1:58:fe:e6:52:53:23:c6:48:
                    ea:4f:7a:05:14:ad:5e:73:61:e1:4f:66:cf:0c:f0:
                    aa:fb:f3:dd:2a:43:26:f6:ef:c7:9c:22:7d:68:61:
                    73:f5:74:d6:bb:53:67:8e:ae:a5:76:05:b5:8c:ff:
                    b8:e3:4a:59:54:d9:e9:df:e3:ac:45:f4:ea:fb:9d:
                    72:3d:b9:4d:5d:34:dc:f1:1c:6d:58:5d:f3:08:3d:
                    b2:e7:e7:2c:1c:e5:cb:82:39:ff:be:b7:cb:a2:f3:
                    16:ba:95:95:c5:3d:84:78:a0:8c:75:69:4f:66:f2:
                    09:ad:a7:33:1c:9a:d6:51:f8:c7:a8:5d:2a:96:dd:
                    ef:ff:c0:73:86:26:98:88:12:62:be:51:05:ad:7e:
                    3a:41:3d:db:28:cd:0c:b0:d1:34:53:57:b6:99:30:
                    5f:81:08:4a:8d:dd:d0:96:bb:13:68:eb:76:a6:52:
                    1f:5d:90:8e:c6:e0:4c:84:76:2c:0f:9c:2c:32:02:
                    97:86:2c:29:57:4b:db:4b:f8:db:60:4e:e8:07:f5:
                    d0:5a:84:7c:5c:50:f7:da:bf:63:74:73:47:85:49:
                    23:8a:18:f7:6b:36:1b:c2:bc:d4:cf:df:3d:aa:b4:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:42:9E:19:E2:C8:7C:CD:94:A7:9B:9D:BE:1E:FE:FA:0F:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9468bb5-ab0a-30f4-9c29-d137d71e6311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:91:63:e9:74:39:e3:43:ee:b6:61:cc:d6:21:15:f5:0f:
         c9:90:7c:22:4e:6a:3a:d4:0b:55:71:e4:20:a5:4f:72:81:11:
         42:ae:18:9e:4e:7b:7c:63:d9:ad:27:f2:28:4d:49:88:41:87:
         65:8d:96:f1:51:01:9c:07:df:f3:86:b6:77:d9:2f:6a:2d:e9:
         e1:63:fb:e6:30:65:cd:70:36:d8:c1:ab:c1:1f:77:64:bc:65:
         36:00:f2:6c:d6:3e:78:66:e9:d5:36:4c:18:f1:31:a0:70:bd:
         48:8f:c7:0f:fd:12:e2:ad:14:0f:bd:6d:e7:78:a0:d5:0f:37:
         7d:c8:38:23:c1:8b:c3:05:ff:c0:97:89:75:13:49:0d:5c:56:
         74:7c:99:10:74:8f:fb:33:7d:18:9f:d9:29:c1:8d:f9:0d:20:
         de:ab:6b:df:4a:43:f9:5e:d1:e2:41:c7:73:41:20:e1:a8:f1:
         53:77:01:ce:cd:2f:f9:9c:2e:44:08:f2:2a:56:87:d5:32:88:
         d2:8b:43:86:a5:9b:2b:2d:81:13:9d:5e:f0:44:fb:17:87:c7:
         f6:88:33:39:59:12:dd:e2:f3:03:4a:c2:fc:dc:29:6c:28:df:
         6b:4d:f6:f2:31:83:35:bb:29:68:5a:d9:aa:54:cb:a0:ed:0f:
         08:82:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:07 2024 by rpki-client on console-fra.rpki-client.org