Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
File:                     d44ea506-3bb6-396c-9617-92bba4db10b9.roa (raw, json)
Hash identifier:          748dJ5wo4enEvw85/dlj40bi2GQCn26euOHHK9wBHSg=
Subject key identifier:   C7:B5:5B:AB:64:BC:7A:E1:45:E0:2A:F2:91:6B:1F:C7:47:39:53:9E
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F43285845A9BE193BF15B55F9BA8D5F40
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     394367
IP address blocks:        205.207.142.0/24 maxlen: 24
                          207.167.72.0/22 maxlen: 24
                          23.176.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:19:3b:f1:5b:55:f9:ba:8d:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=a85bc8ba-2a3e-43c5-96a2-113b7d0a2ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:1f:99:50:1f:db:d7:5f:40:d5:fe:10:62:
                    cc:5c:34:2b:2d:b3:2b:cd:22:fc:b3:9f:dd:bb:0e:
                    10:8b:4b:f8:16:31:fd:bf:54:0e:83:b1:a4:d3:b6:
                    1a:69:f1:67:a5:e9:34:9c:a8:d6:6e:b9:85:75:7c:
                    57:02:fd:92:51:51:47:2c:51:f5:9d:d1:30:ad:93:
                    91:91:f2:cd:b2:00:13:da:ec:d2:2d:51:7a:2d:fb:
                    f2:d7:26:32:03:b6:31:03:cb:4e:97:59:1e:69:da:
                    76:b4:51:42:c3:dd:57:e4:3e:1d:ba:ad:be:15:95:
                    c1:e0:1f:c3:c3:c8:86:c5:94:b8:00:f6:05:58:74:
                    b1:43:fe:ec:7c:9c:de:f2:51:2f:19:e2:3a:95:4e:
                    18:95:49:0b:73:f3:7f:45:a8:ee:cd:65:54:2b:e9:
                    c2:e7:a0:73:9f:81:46:66:8d:cd:3c:35:90:16:f7:
                    0f:6b:19:57:17:1b:13:9a:78:a7:09:8c:93:72:18:
                    4d:f7:ca:b0:84:08:00:97:17:ef:91:c6:51:34:2b:
                    1d:8f:1a:a5:e1:63:0c:ca:e0:85:06:fa:04:a5:1a:
                    91:93:cf:88:e0:41:f0:55:e9:e0:e6:8a:14:b5:60:
                    b3:c9:6a:86:97:8f:d3:2e:80:9c:ba:26:42:e1:8c:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:5B:AB:64:BC:7A:E1:45:E0:2A:F2:91:6B:1F:C7:47:39:53:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24
                  207.167.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:00:12:96:2d:5b:89:d3:17:93:da:7c:4b:9c:64:44:4e:
         78:a8:c4:60:8a:4e:ab:6c:54:96:eb:73:56:09:1e:95:62:c3:
         bf:dc:4e:2e:40:e7:d7:58:27:d5:13:3a:b2:45:9a:e2:f0:29:
         ed:fe:64:0d:df:43:88:12:81:fa:36:a8:4e:77:16:0c:e9:df:
         e4:4a:f9:79:fe:f4:1d:f6:aa:31:53:6a:03:61:09:db:35:03:
         3b:05:72:d6:17:6c:02:a8:2a:a3:69:a0:36:a2:48:94:6d:63:
         8e:7a:b4:63:11:79:72:75:99:d9:b1:9a:a4:05:2f:1d:be:93:
         ff:c8:ca:7e:58:ac:62:d1:55:33:a9:48:61:63:52:8e:8e:ce:
         3a:5e:e6:82:65:1c:15:76:5a:86:27:e4:2a:62:8f:e9:45:84:
         0a:28:89:23:ed:02:55:6d:cf:6f:4d:99:c9:0c:10:d4:5f:d9:
         0e:f4:e4:a3:97:29:37:30:1f:84:e1:27:c9:49:f7:d8:98:af:
         be:b6:80:49:77:19:8e:b6:d2:78:bf:fd:ab:eb:eb:8a:25:17:
         1e:1d:e1:b5:86:5d:bb:bc:29:1f:16:a2:c6:d1:e0:6f:d5:6b:
         be:4e:d9:ce:ba:3c:e9:c1:70:66:73:54:12:11:20:47:b1:ef:
         f3:e6:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:39:03 2024 by rpki-client on console-fra.rpki-client.org