Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
File:                     286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa (raw, json)
Hash identifier:          Hy7j/h73yZ3Lwdwf1UNLJ9Q0ir4aII6CBVqAzWbBZWQ=
Subject key identifier:   F7:8A:D5:46:FE:79:DE:A4:55:E3:EF:EB:FB:EE:27:24:8B:6E:89:02
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F43285844CBEBAD566FCC50CF10898100
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
Signing time:             Tue 06 Feb 2024 02:00:26 +0000
ROA not before:           Tue 06 Feb 2024 02:00:26 +0000
ROA not after:            Mon 06 May 2024 01:00:26 +0000
asID:                     397849
IP address blocks:        136.143.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cb:eb:ad:56:6f:cc:50:cf:10:89:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Feb  6 02:00:26 2024 GMT
            Not After : May  6 01:00:26 2024 GMT
        Subject: CN=80eac5e3-a95c-46de-857f-b6543b29c551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:d9:d1:7b:81:4a:e3:83:c5:85:10:bd:ef:
                    f1:7e:a9:88:53:56:22:83:fa:df:e0:e9:15:15:bb:
                    e8:c5:1a:eb:67:6a:26:f4:b7:8f:6c:4c:f4:c5:29:
                    f7:5c:00:c8:04:27:7c:19:d4:1b:b5:f1:14:b5:76:
                    de:da:27:da:4b:34:c1:4d:03:77:92:67:17:8b:a4:
                    be:3d:92:f8:05:94:71:6a:6e:6f:77:45:99:d0:5a:
                    67:af:b1:ad:dd:fd:b7:9e:f2:7b:8b:63:d4:3b:b1:
                    d1:e5:13:3d:37:71:68:02:33:75:43:09:08:7a:07:
                    5e:d2:0b:52:43:4d:2e:d9:3c:db:d0:70:6a:02:53:
                    b8:0c:3c:c0:38:24:22:be:cb:ce:69:2e:0f:35:56:
                    0a:31:4b:54:5f:f3:16:b4:5c:7a:bb:0d:c1:fb:59:
                    5f:b2:c9:23:1b:dd:bd:30:17:84:0f:d8:5f:d2:e7:
                    0f:da:66:79:1b:16:8f:7a:01:54:4f:43:58:99:4d:
                    2b:c7:e1:8e:4e:75:a5:99:eb:3d:58:13:fe:c7:f1:
                    4a:56:66:f6:ff:e3:4a:b9:30:09:5f:fa:74:89:4f:
                    49:d1:32:db:60:fa:87:9c:3c:11:9a:b5:37:55:11:
                    65:43:e8:9a:1a:cd:2f:b5:6e:5c:14:56:c2:f9:5a:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8A:D5:46:FE:79:DE:A4:55:E3:EF:EB:FB:EE:27:24:8B:6E:89:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:08:2e:13:73:16:ed:11:a7:7c:c0:53:fe:92:73:9f:b9:
         15:10:69:a7:2f:57:d2:88:58:a3:01:35:ca:8a:44:e5:3c:17:
         dc:68:af:29:d4:5f:46:6b:33:dc:c0:e1:e4:0e:62:2e:8e:2d:
         1d:17:3f:84:7d:68:8a:30:72:cd:3d:bf:19:39:73:c5:06:9c:
         af:fc:fe:62:0f:44:97:75:1d:7d:d7:fc:eb:8e:7b:ce:49:2b:
         29:78:03:2f:4a:b5:8d:09:02:5e:27:ee:d7:e0:43:95:21:e3:
         25:68:66:94:58:d3:d4:00:b0:65:ed:c8:88:2c:e0:bd:1a:5e:
         5f:27:e0:fe:86:a6:15:b7:a3:12:59:28:31:44:da:28:ae:06:
         40:13:ae:8a:19:cb:88:4e:12:91:16:3e:d3:59:39:c2:7c:f9:
         fe:79:3c:07:96:f1:a1:72:e6:aa:a4:e1:d8:31:41:2c:bc:62:
         38:48:2c:1e:f1:e1:a8:70:9b:00:c4:6a:fc:0e:71:0f:52:52:
         6b:cc:e0:e9:c5:42:b5:d4:49:45:47:14:c5:2a:0e:e7:6e:dc:
         9b:7e:d4:bb:65:04:3e:c1:0d:63:87:63:3f:02:ad:a9:96:a9:
         66:c5:cd:21:2f:f8:6f:19:c1:cf:3a:3a:ef:63:37:c3:5d:cf:
         6c:a1:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:37:43 2024 by rpki-client on console-fra.rpki-client.org