Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa
File:                     b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa (raw, json)
Hash identifier:          YeurGJGOAN98QxHyL1yfIHE1bCLYVqfTcAYUPTbfAGw=
Subject key identifier:   A5:6E:D3:6D:B1:20:88:23:83:19:F6:31:2A:EB:9A:9B:4E:FF:7F:2F
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285845777DBEEB8CC872AC7915EE80
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     398071
IP address blocks:        206.227.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:be:eb:8c:c8:72:ac:79:15:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=8d467fbb-3d7f-4d89-9eae-d039dbe2af0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:96:f4:a7:d6:b9:43:5e:5c:84:fe:15:90:
                    f3:cb:73:7c:f5:db:37:96:48:23:c7:73:84:52:dc:
                    ba:17:c5:10:35:9a:da:64:17:a7:5a:b1:59:ca:db:
                    1a:96:04:2e:96:06:11:9e:df:a0:7e:64:59:30:3a:
                    07:b1:d5:35:9b:ca:ae:0c:a6:91:bd:87:d6:fb:76:
                    e6:88:c9:a6:d0:df:dd:a3:7b:65:42:e7:08:50:09:
                    7c:0b:a2:08:a0:e1:44:e3:2e:92:49:4c:ec:8e:4b:
                    87:f5:76:1e:35:ce:03:17:ad:2e:d9:15:b9:92:2c:
                    b1:30:03:93:57:81:32:34:e6:5f:fc:5c:1c:37:ef:
                    8e:00:75:5a:68:13:cb:0e:c9:35:34:b4:43:5a:ba:
                    1d:70:5f:5a:b0:ea:e8:31:a7:d7:ba:68:95:1e:22:
                    13:cd:2b:da:b0:d3:5e:d0:f1:c5:c4:dc:e3:18:71:
                    fd:d2:27:c2:f8:5f:eb:f1:a8:ed:1e:e9:4b:11:d7:
                    6e:d9:52:ab:36:58:47:84:ec:a7:b0:8d:bf:a3:dc:
                    d5:36:d1:0c:7a:fb:a4:a8:2f:94:e6:2f:ce:eb:fe:
                    ec:d4:25:0f:be:92:05:96:d2:4c:dc:02:3c:1b:d9:
                    65:43:1e:2a:4d:18:54:de:77:70:d8:4c:b3:91:88:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:D3:6D:B1:20:88:23:83:19:F6:31:2A:EB:9A:9B:4E:FF:7F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:95:2f:09:a8:a1:b1:4e:a2:6c:be:5b:48:c1:f5:93:68:6f:
         98:21:48:aa:29:26:45:d1:bd:2c:9b:48:ae:fc:90:8c:4a:05:
         47:ec:35:b7:9e:f0:b4:51:13:02:08:64:43:65:fb:52:22:2d:
         a4:a7:1c:c7:7a:8d:24:0a:4d:7d:c6:a1:32:87:e0:8c:dd:1e:
         9b:72:9d:88:fb:61:dd:f6:e2:8f:0b:4e:b6:60:18:16:ad:00:
         9f:89:ec:13:3d:d9:ed:75:8b:2a:b5:3c:59:ab:cd:18:7f:f3:
         c0:1b:6c:79:31:5e:a4:9b:ea:b0:20:2f:bf:1b:67:31:68:42:
         3b:80:2a:df:38:01:e0:fe:a0:2b:88:9c:30:d4:53:b9:47:78:
         80:2d:55:39:93:8b:d9:e7:ec:8b:5c:88:99:6b:06:84:1d:66:
         b3:22:75:74:4d:c1:b6:69:1c:08:15:6c:0a:6b:fe:ca:5a:57:
         5e:ac:9a:6b:2b:57:6e:09:48:5d:3c:26:73:a6:a4:31:bf:13:
         29:8d:db:77:60:3d:08:1c:33:69:8a:de:e6:f9:b9:6e:d5:cd:
         1a:40:45:07:88:cf:b2:42:9c:97:2e:9c:19:f5:93:61:47:b6:
         c5:15:2f:df:a8:fd:39:8d:2c:a5:85:0b:44:ae:5c:88:e7:79:
         eb:4b:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:11 2024 by rpki-client on console-fra.rpki-client.org