Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa
File:                     ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json)
Hash identifier:          YZ6v6oES+3shfr5NOZUXDlWnd5HWndLEQaLHotyLrto=
Subject key identifier:   78:F7:A6:81:3E:7B:D9:BC:E8:FA:CC:18:FF:66:55:1A:43:52:64:BD
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F43285845857329C6D7AA911A99F182A0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     394625
IP address blocks:        199.38.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:29:c6:d7:aa:91:1a:99:f1:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=913c13e0-ab89-4276-a5f5-f124f278e3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:f5:85:a8:15:cc:fc:ac:19:de:65:ce:c3:
                    2e:80:3d:76:57:b9:f4:14:0c:1b:7f:e8:c3:c8:87:
                    e6:67:c9:bb:8e:22:92:d2:57:cd:76:eb:a1:c8:3c:
                    bd:28:a2:46:0f:87:e5:15:00:fb:22:18:72:7b:d7:
                    2c:16:28:25:ec:aa:97:6b:d9:3d:51:eb:e6:9f:c6:
                    17:6a:07:87:79:63:79:a9:0a:0b:9b:18:97:82:5b:
                    d2:f1:ec:b1:d2:f9:37:98:10:50:af:ad:1e:73:f9:
                    b4:b9:f5:63:f3:67:80:cd:2a:34:86:c8:a0:d0:86:
                    d9:dd:30:2c:09:1c:e8:35:33:7f:95:5a:b9:d0:ca:
                    f7:d4:a1:3e:18:0c:ca:cd:63:35:20:5e:6a:ed:cd:
                    9b:40:a6:02:0d:83:6b:43:5e:c2:99:2b:72:3b:69:
                    b3:5b:7d:c5:c9:79:d3:c2:52:49:28:0b:e2:1e:e1:
                    16:20:ce:97:1e:80:31:bb:94:1f:0c:6c:df:ff:92:
                    5b:7f:02:c7:2d:54:57:32:1f:ad:d4:89:7e:bf:dc:
                    80:9d:aa:58:dc:df:15:d0:eb:a2:5c:f0:e1:be:7f:
                    a3:59:e1:a6:d2:93:ba:6c:46:80:6a:36:80:28:14:
                    2e:e6:b4:26:65:8f:62:6f:42:fc:db:2d:b5:15:f2:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:A6:81:3E:7B:D9:BC:E8:FA:CC:18:FF:66:55:1A:43:52:64:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:81:fa:e7:55:cf:e0:80:f2:5a:ad:ac:e9:e6:42:bf:67:
         31:de:57:d2:f6:bc:3b:9b:84:8c:87:d5:73:3d:46:db:af:ea:
         e7:56:9a:4a:4e:57:b6:67:65:dd:4f:6f:77:f4:b7:4b:8f:a5:
         04:c1:c9:16:10:a3:d4:85:97:3b:61:d9:10:12:f2:31:2e:66:
         46:34:7b:84:0c:97:d6:de:8e:ff:2b:67:5a:e1:47:2c:ce:23:
         22:cf:1d:36:be:16:a2:96:f7:d3:f4:4e:6e:42:ad:01:28:ba:
         ee:f0:84:15:e2:d9:95:f8:a0:25:eb:88:06:02:19:08:5d:e3:
         bc:0d:86:f4:6d:55:a9:4e:4f:89:35:bc:26:43:ca:05:15:54:
         97:35:72:4e:4e:16:eb:02:11:57:f8:d8:d6:6f:70:9f:9a:50:
         00:18:3b:1c:93:93:39:f5:8e:67:93:96:a5:e4:d4:5a:81:0f:
         50:3d:fa:04:7f:af:2a:d2:46:bd:e3:3d:fc:3d:5a:c0:fc:d4:
         c0:bf:f7:7c:f5:be:d1:61:fd:85:40:e6:81:f3:86:b6:78:45:
         fc:c1:27:d7:7b:3c:64:69:65:51:2f:dd:38:c6:f9:9f:1e:2c:
         33:22:39:34:fa:f1:83:24:1e:0b:c4:28:76:58:5c:11:1c:09:
         cf:8b:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:07 2024 by rpki-client on console-ams.rpki-client.org