Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/176172fa-1c30-3b07-ac99-cc2fc360b589.roa
File:                     176172fa-1c30-3b07-ac99-cc2fc360b589.roa (raw, json)
Hash identifier:          OqJUge8YeqlsS3fH/LoFqzCZpk97q5VelmO1PajeqTU=
Subject key identifier:   A6:A6:56:42:99:A6:04:85:A2:4F:82:54:99:95:12:43:AA:13:67:B8
Certificate issuer:       /CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
Certificate serial:       010D0C9F432858452275A1A25E9E3F58E79DDD00
Authority key identifier: 01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/176172fa-1c30-3b07-ac99-cc2fc360b589.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     7922
IP address blocks:        147.191.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:a1:a2:5e:9e:3f:58:e7:9d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=fff5eac5-eee2-413b-b474-8765e06d13f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:74:3c:bb:e1:d2:65:2f:59:b2:30:0d:b5:
                    b7:2f:23:b3:25:59:fb:ea:05:1c:93:60:9b:3f:33:
                    53:ad:90:9f:97:2d:c0:41:30:9e:6e:7a:33:0b:1f:
                    6f:3f:90:06:15:ed:5e:d5:af:a4:7d:ef:5f:53:35:
                    55:93:b2:70:f0:d5:ab:b3:ad:33:ec:85:d5:cc:44:
                    cb:22:c7:ad:44:ff:64:66:b7:f0:b3:d8:1c:2e:74:
                    ee:9b:a5:9f:c1:e3:5f:66:79:b1:27:47:62:83:16:
                    66:c6:30:23:8e:e4:b7:1d:65:c6:12:a8:6a:32:af:
                    76:d3:dc:7f:09:0d:51:8d:f7:c5:9d:88:ed:d6:e4:
                    c8:22:e2:4c:09:4a:36:3b:df:8d:d0:1a:38:79:c4:
                    3a:bb:9c:9e:31:7d:f4:cd:56:8c:5a:41:ac:bd:c0:
                    0a:1b:02:5d:e3:29:09:8f:5b:05:17:cd:2a:80:ac:
                    57:a2:cb:d9:2f:68:c6:b3:3a:e1:95:e2:99:3d:1f:
                    1c:bb:de:50:12:69:07:4b:db:83:fe:f0:ef:48:26:
                    b2:40:56:bd:88:d7:b6:41:a0:36:35:af:40:b7:ae:
                    f4:90:cc:8c:98:6d:ce:ac:3e:4e:05:b8:d3:51:26:
                    46:6f:8d:26:80:7d:31:28:d6:9b:6d:84:4a:45:10:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:56:42:99:A6:04:85:A2:4F:82:54:99:95:12:43:AA:13:67:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/176172fa-1c30-3b07-ac99-cc2fc360b589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl

            X509v3 Authority Key Identifier:
                keyid:01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:54:a0:59:44:f2:7a:35:c6:e5:5f:ca:3b:eb:f4:b1:f7:ab:
         1a:4b:15:24:6b:8f:fb:5c:d6:d6:be:ab:b5:b6:65:8a:44:5b:
         c4:0f:f6:7a:b9:81:a3:08:f3:32:f9:2f:11:c8:aa:71:a5:be:
         d5:27:12:e7:30:c2:fb:8b:74:fa:e9:de:f8:39:9c:8e:37:28:
         6f:79:f0:f0:fa:68:3c:42:b7:69:e3:75:06:e2:8c:43:7e:f9:
         23:73:d8:f2:5a:0d:a3:ce:c9:2f:32:ad:ce:56:70:18:8d:c0:
         41:19:0c:c8:e8:d2:ee:7e:cc:49:a9:f1:b4:47:3d:d9:0c:2f:
         b7:b9:c4:93:f2:3f:37:50:a7:c5:5d:16:1f:5c:b7:51:e4:c5:
         41:94:b1:9a:2a:4d:58:60:84:ae:2a:a4:87:04:eb:4e:2e:be:
         c9:33:6b:e8:30:f5:98:93:33:26:a6:a6:b2:89:d2:bb:dd:0f:
         32:d6:72:1e:69:af:4c:55:44:99:fb:89:5b:d1:22:76:87:b0:
         50:f3:40:7a:fd:99:d7:62:5b:9e:f7:35:d8:8d:ca:c3:43:62:
         8f:f1:09:67:86:49:6e:6f:b1:f8:20:09:11:c0:c9:09:24:8c:
         06:a9:fe:50:59:2c:a4:0b:9d:14:a0:1a:4e:69:f3:0a:39:ba:
         8f:19:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:15:31 2024 by rpki-client on console-fra.rpki-client.org