Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa
File:                     e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa (raw, json)
Hash identifier:          UZGn8s2YAFwDzn+8oxyVyVpnvgqHo/i5rYYbghMsBJI=
Subject key identifier:   AF:7C:E0:1E:84:FB:50:C4:B8:68:58:E5:CF:EC:DA:05:E2:A4:9F:6F
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285845777DC1E0505FDF2BE4720C40
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     13984
IP address blocks:        209.151.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c1:e0:50:5f:df:2b:e4:72:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=07e43f32-bd64-4ec1-b90a-c3629ded539c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:20:90:41:15:9f:7a:a9:40:a7:42:67:2a:
                    95:94:0c:4c:c7:66:76:26:5a:cd:64:ba:ac:e3:73:
                    fb:8d:c7:e1:7a:1a:5e:7c:ed:f7:32:24:88:d6:0d:
                    ea:4a:36:bb:37:bd:5b:65:3d:2f:11:d6:42:77:00:
                    9c:df:3f:50:f9:16:2c:7f:d2:bd:86:f8:4c:c8:ee:
                    5f:a1:86:4f:f0:e7:27:79:ca:d0:d1:82:71:66:13:
                    f2:9b:c7:da:4b:9a:86:bf:77:72:28:5a:11:a8:9f:
                    20:4d:76:a8:69:4b:ba:24:8f:e7:fb:ed:29:f9:98:
                    63:db:bc:53:c8:30:11:5d:33:d4:63:99:c2:33:a2:
                    1e:cb:c8:81:32:48:a9:3a:01:cb:5c:7a:01:92:ec:
                    63:ec:2f:1f:67:56:e7:91:36:b7:1b:3f:f3:42:b4:
                    41:eb:7c:da:9b:54:b6:9b:e3:9c:30:04:82:f0:be:
                    e3:d1:d1:f2:8f:c0:34:c4:71:50:fc:84:6a:64:fa:
                    49:8b:fd:ee:91:dc:52:a8:46:fb:5c:49:b7:f0:9e:
                    56:38:e3:6a:2e:36:8d:7b:ce:b4:a6:51:72:da:4d:
                    29:42:90:3d:05:48:e3:41:20:43:e7:dd:ff:1b:c5:
                    82:9b:40:8e:78:ea:c6:95:6e:84:ac:03:a6:e4:a3:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7C:E0:1E:84:FB:50:C4:B8:68:58:E5:CF:EC:DA:05:E2:A4:9F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:86:a0:46:95:62:54:67:c3:40:84:b1:b6:65:1a:cb:7e:
         19:35:57:99:b6:5a:74:8f:25:52:3f:2e:1c:e8:fb:70:c6:33:
         24:7b:c0:e3:b6:90:35:e2:e5:f1:c7:2d:8c:d3:22:b1:13:e9:
         01:76:c6:ec:55:85:18:59:bc:cb:c1:d9:a9:15:77:24:09:1f:
         c4:2e:bd:29:cd:3f:59:4f:1b:b0:4f:1f:e5:f8:49:ce:a3:6c:
         19:26:bc:4c:a0:76:45:77:3d:e3:32:4e:36:76:cc:9d:34:0d:
         fb:59:d0:08:e8:52:2e:c2:43:f8:6a:3d:07:6a:04:5c:40:1d:
         25:d0:0b:96:52:09:3f:7a:3a:3c:99:0a:a6:dc:9f:3e:b8:c3:
         43:ac:bc:b6:e9:bc:e8:bc:f7:32:3a:a4:7d:3b:2c:6f:80:40:
         98:52:c0:7a:ff:df:6b:08:2c:97:ba:fa:b5:06:08:90:7e:de:
         7b:5f:39:bd:0e:94:a9:bb:8a:09:97:a6:6c:14:b9:f1:9f:9a:
         ef:ca:e7:8d:e1:6f:93:d8:c3:ff:08:8a:e7:3e:75:95:0a:2e:
         6f:f9:0a:f4:c8:10:23:4f:7f:3f:52:f6:df:03:eb:0e:d4:02:
         64:df:96:c0:e7:7e:fb:7b:ae:e3:71:c6:90:eb:f5:9e:42:08:
         96:6b:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:46 2024 by rpki-client on console-fra.rpki-client.org