Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f395faec-aa28-3453-8072-6aa214e1b755.roa
File:                     f395faec-aa28-3453-8072-6aa214e1b755.roa (raw, json)
Hash identifier:          JMdVQwQIQiNRhHwy/o1f4hQCvJhbOALRxzq89MzsDsA=
Subject key identifier:   48:7E:78:F2:94:80:DA:21:56:B4:3B:BD:90:84:1E:AB:67:48:7B:B8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CA3ECAC6E8C0A937546C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f395faec-aa28-3453-8072-6aa214e1b755.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        172.223.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:a3:ec:ac:6e:8c:0a:93:75:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=14e6fc9d-e8cd-4c8b-81a1-0f1ac5d7fbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:02:d8:47:dd:8b:90:24:40:8c:a4:80:be:
                    86:f3:59:ed:e5:95:1e:8f:1f:b5:8e:fe:5f:db:f3:
                    ad:7f:32:8a:f2:3e:66:9e:eb:47:6a:3f:b7:7b:49:
                    89:13:d2:7d:4c:20:2d:77:59:e8:03:97:19:11:e9:
                    b2:f4:9a:52:a3:8a:ac:58:5d:b7:1f:ec:08:a2:d7:
                    28:43:2c:d7:dd:f7:ca:df:63:f4:f3:e5:ac:db:40:
                    5a:94:e5:b6:66:89:49:b9:41:28:00:78:7b:41:63:
                    b2:24:cf:1b:13:2a:40:10:b5:70:1d:7b:77:00:90:
                    2a:14:c6:fc:83:4b:f0:19:db:b8:19:72:69:fc:c1:
                    12:4c:9b:14:1d:f4:fb:d5:3c:48:d4:f1:4f:5e:88:
                    34:9c:b0:2d:e4:32:b1:ae:fe:4c:67:38:6a:99:1e:
                    1b:b6:54:e7:93:28:4e:29:f2:82:a0:5f:cd:ee:ae:
                    cf:3f:19:11:43:43:8e:16:8a:b1:54:dc:75:70:da:
                    84:02:ac:c6:08:d3:17:d9:85:50:cb:b4:7d:a7:44:
                    76:48:18:40:49:61:77:71:9b:d8:64:77:07:09:7c:
                    b3:a0:39:75:07:00:79:94:d0:30:fc:da:c3:3c:65:
                    db:a8:d7:97:d0:8b:bd:c5:5d:fe:d2:eb:16:b0:94:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7E:78:F2:94:80:DA:21:56:B4:3B:BD:90:84:1E:AB:67:48:7B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f395faec-aa28-3453-8072-6aa214e1b755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.223.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:a1:41:35:ab:b7:a6:e0:37:ae:ec:3b:d5:93:e3:7e:ab:
         33:ca:74:b1:70:25:fa:cf:e7:cb:57:d7:04:68:fb:d7:30:98:
         11:89:b2:bb:8e:9b:26:88:f8:d7:64:30:37:61:f0:07:8a:84:
         7c:16:3d:3c:c1:e7:0f:81:1d:28:d5:1c:99:48:c3:02:47:ed:
         b8:b8:9f:3b:2e:e4:9c:17:ff:56:8c:3c:b0:f4:bc:b7:5b:83:
         83:0b:dd:d5:30:71:15:83:45:fd:53:bd:70:cb:dc:17:4c:9a:
         86:82:bd:0b:39:2b:01:ae:a5:cd:b7:26:48:09:c9:c3:d0:9c:
         12:c6:2e:9d:1a:e2:a4:a9:85:19:f9:a2:ba:96:b6:95:be:ab:
         53:7e:a0:c1:3f:41:40:d9:d0:ad:bd:41:88:bc:ac:13:ea:fc:
         57:5d:c4:71:3c:d0:7b:95:dc:58:6a:33:03:c4:98:e4:5b:10:
         12:52:98:0c:1f:33:0e:52:c0:a5:eb:5c:55:b6:24:23:27:95:
         5f:19:9c:f5:f5:90:2a:20:c9:6a:8d:b5:ec:d1:cc:2d:91:93:
         d3:e7:0d:c8:4f:c6:02:17:07:a0:3f:be:17:fa:f5:dc:1e:fc:
         71:ed:6f:dc:31:fb:0d:83:30:c2:38:21:30:d2:90:36:e6:29:
         d6:34:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:29:21 2024 by rpki-client on console-fra.rpki-client.org