Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/9e46c5d0-248f-3e46-88a6-0ebd831a6676.roa
File:                     9e46c5d0-248f-3e46-88a6-0ebd831a6676.roa (raw, json)
Hash identifier:          UKTvMwRV7ncJhmwqvJHXHiqPitufGOUn9IL9oVSpbQU=
Subject key identifier:   1A:6C:E3:4C:BC:21:A2:DD:75:ED:31:99:D9:9A:51:B3:E8:99:75:08
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858457D131E34AE684E2F33847C80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/9e46c5d0-248f-3e46-88a6-0ebd831a6676.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     25795
IP address blocks:        174.136.96.0/20 maxlen: 24
                          206.162.240.0/20 maxlen: 24
                          208.79.88.0/21 maxlen: 24
                          206.125.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1e:34:ae:68:4e:2f:33:84:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=12b26a24-a349-41f4-af93-f61b86794c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:23:b4:68:47:eb:a5:d4:1b:71:f5:8f:f8:
                    a7:4a:43:de:c1:6d:26:8e:83:e2:0b:b9:af:56:8e:
                    46:fa:65:80:e9:ce:06:0c:d9:07:15:69:20:86:24:
                    2c:98:32:b3:23:98:c3:cd:11:8f:01:4a:b8:40:94:
                    d5:92:1a:27:0a:9c:2f:88:12:ef:0b:b6:0b:05:67:
                    b4:9c:bc:5b:b7:e6:80:5a:b5:5b:85:6d:06:9d:fc:
                    04:50:ba:db:ff:36:b4:dd:cc:3a:8f:f7:79:b9:0c:
                    7b:af:cd:84:fa:8d:70:a2:66:38:05:e3:47:bc:09:
                    41:74:65:8c:7e:35:a9:44:41:9c:a0:f7:d2:e5:5a:
                    e1:08:df:97:db:95:07:b2:73:47:70:dc:d1:54:3f:
                    62:85:4d:f2:e2:45:c1:bc:31:82:11:29:29:f1:61:
                    37:d5:a0:7a:5b:5c:21:da:e0:5f:82:9c:12:03:62:
                    99:eb:54:42:10:2e:5b:af:b0:6f:10:9a:ed:b7:83:
                    09:02:55:04:70:5a:ea:ba:a5:d9:64:b8:c6:8d:f7:
                    77:bd:cc:38:de:7d:2a:82:15:30:de:b4:cc:e5:fa:
                    b9:de:2e:80:50:a1:a6:43:65:96:ad:41:29:61:18:
                    f3:fb:f2:a5:e1:14:9e:1a:f9:25:af:c8:a9:78:87:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:E3:4C:BC:21:A2:DD:75:ED:31:99:D9:9A:51:B3:E8:99:75:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/9e46c5d0-248f-3e46-88a6-0ebd831a6676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.96.0/20
                  206.125.168.0/21
                  206.162.240.0/20
                  208.79.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:e3:c0:da:3e:d2:e6:93:4c:35:6c:69:bd:d6:17:49:35:
         a7:17:2e:87:55:5c:59:d6:55:b4:73:bb:0e:de:e0:95:a7:e5:
         c4:04:4f:65:5f:26:fb:d2:65:3d:4b:3c:d4:2a:19:dc:2a:d3:
         6f:64:04:30:b9:3d:65:cc:b0:7e:3d:a0:6c:37:a3:df:02:3e:
         25:44:95:8f:1e:7e:81:fe:84:0b:19:e0:e1:93:a6:da:d7:10:
         e2:09:ea:4c:e0:2b:ff:c3:96:a5:81:9e:4b:ee:cb:c4:ff:00:
         be:b9:c5:45:fa:90:41:51:01:f9:db:71:5a:f1:f8:78:c1:d1:
         21:08:8a:e8:a3:a3:2d:f5:be:43:04:70:fd:02:52:d1:2f:eb:
         e4:b1:81:fe:1c:b4:d6:23:ae:53:74:a0:5e:17:cc:ea:f4:ed:
         54:4f:9e:cf:a2:44:af:82:8d:23:fc:75:09:37:9d:60:5c:aa:
         d1:da:55:7d:c6:47:95:c6:c2:dc:b1:a8:60:ca:bd:04:44:72:
         23:5d:6f:cd:04:72:d1:8b:d0:16:27:5e:f6:e1:03:2d:39:74:
         25:56:d6:cc:42:0c:23:31:1b:a5:ca:45:27:78:64:0f:d4:9c:
         03:08:61:60:f3:c3:1e:64:e9:97:fa:fa:d4:d6:33:46:b0:e5:
         8c:d1:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:18:42 2024 by rpki-client on console-ams.rpki-client.org