Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
File:                     d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json)
Hash identifier:          Zrm5Mm/rclwLLY4FYNCjr8jF0e00nCSCGLgndKL68CA=
Subject key identifier:   E4:D6:04:26:1B:28:23:4E:4F:82:66:F8:93:A3:2E:5C:C8:8F:4A:25
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F432858458B088CD235D4EEE5B4037D40
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        147.124.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8c:d2:35:d4:ee:e5:b4:03:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=590abf55-e056-48b8-8afc-08b8c218851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:64:eb:30:1a:86:55:27:c1:e0:2d:7f:d3:
                    7a:61:24:72:ed:ef:93:4f:45:56:56:8a:b5:f4:e2:
                    e2:4a:6e:7a:58:5f:13:82:e8:d8:d2:87:50:4e:cb:
                    dc:90:9a:39:17:44:6d:85:fa:9d:22:fd:f4:92:4c:
                    70:5b:ec:94:49:c6:8a:db:0a:92:d4:6e:03:b4:1a:
                    2a:c9:37:27:7b:da:5d:09:02:5e:88:fb:23:0f:de:
                    25:4f:77:31:33:54:53:b8:e6:85:fc:c5:6e:71:38:
                    67:7f:d2:7a:19:fd:57:a5:ba:4e:18:31:73:ca:49:
                    7f:a1:2b:68:0a:44:04:d1:65:56:71:57:ba:63:43:
                    ba:10:ad:ec:e1:3b:35:f9:dc:57:ed:d9:9b:d7:f5:
                    13:27:ad:9a:16:6c:08:a7:bb:5d:e7:54:2c:24:7e:
                    c6:0f:e4:f5:89:9b:62:0e:e3:68:5c:71:46:32:39:
                    37:14:97:fa:4b:a9:c2:af:8c:7a:f1:67:a1:ed:8c:
                    10:62:5f:8a:67:42:be:57:72:fe:6d:3f:e8:cc:a2:
                    09:b3:08:b3:c8:f5:3b:7a:14:e2:31:f9:43:31:e7:
                    2e:9a:76:df:4b:f6:4f:b4:73:4a:e2:ad:5a:49:da:
                    fa:95:ec:e7:8d:90:07:c6:c3:03:47:99:f8:92:fd:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:04:26:1B:28:23:4E:4F:82:66:F8:93:A3:2E:5C:C8:8F:4A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:27:64:3d:cb:a1:00:9c:00:1e:a4:ea:6f:2e:ff:73:86:26:
         fb:9d:65:6f:5d:04:90:bc:fd:9e:0d:71:9f:68:ec:5e:37:d1:
         8b:84:6b:15:95:d8:c0:6b:9a:83:aa:9c:52:8a:09:c4:94:46:
         b6:8f:b1:d3:29:a9:f8:e1:c8:78:d5:19:3c:a8:a3:5c:14:cb:
         6d:ce:7d:bc:c1:90:a5:50:46:ec:c0:98:80:46:95:c5:aa:63:
         2c:e1:74:6c:dd:9a:33:a5:50:e3:31:4e:34:75:1f:f9:b2:78:
         04:3e:bb:d6:6c:45:22:fb:66:b3:6b:c2:61:31:ba:89:d7:ff:
         56:c7:7e:ed:94:fa:53:9c:f0:e0:ab:fe:5e:b7:c3:8c:b7:c8:
         3a:45:b1:c4:78:1b:b5:89:a8:f1:61:bf:18:8d:69:8f:8e:33:
         47:21:f3:2e:c4:64:08:ee:66:f4:40:ed:47:52:cf:a5:13:7a:
         8f:01:63:a8:03:3b:17:92:2d:14:1b:f7:9d:b7:df:d1:87:35:
         3f:36:fa:60:cb:e3:67:47:f6:da:f8:3f:82:1e:56:ba:47:90:
         18:4e:e8:0b:48:8a:2f:03:3f:44:66:e8:3e:10:4d:a0:24:8a:
         b1:b6:b8:9d:a0:e6:b9:20:14:a3:d5:04:29:53:59:88:be:37:
         1c:fb:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:45 2024 by rpki-client on console-ams.rpki-client.org