Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
File:                     0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa (raw, json)
Hash identifier:          6jo+VlOj+j8Ut740s8MM1mNRrM7KeiZegW3UAbLvdgs=
Subject key identifier:   25:3B:86:D9:11:13:38:52:28:FC:C6:4A:BF:4D:AF:16:80:8D:EF:96
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CAE0E8FEB5FED4880F500
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 21 Jul 2023 07:27:39 +0000
asID:                     7018
IP address blocks:        198.145.225.0/24 maxlen: 24
                          198.145.226.0/24 maxlen: 24
                          198.145.132.0/22 maxlen: 22
                          198.145.136.0/22 maxlen: 22
                          198.145.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ae:0e:8f:eb:5f:ed:48:80:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 21 07:27:39 2023 GMT
        Subject: CN=8c0ab1e9-26c0-4bd7-9f45-d1ca3514f93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:b5:e2:5b:2b:4f:82:d2:89:1d:af:a9:9c:
                    ce:9b:f6:8d:70:52:40:1a:07:9b:94:79:20:3c:42:
                    b2:22:66:c5:6e:4d:94:e0:12:79:26:19:86:45:ac:
                    e1:8b:0f:64:a3:6c:9c:29:55:e4:99:88:d0:1d:cb:
                    23:3b:92:9b:f2:30:dd:cf:c9:38:48:13:73:a8:c3:
                    7d:e9:34:c1:85:9a:2d:27:ad:f3:35:ac:57:20:8b:
                    c7:4f:5a:3f:9b:fb:cf:bc:44:b8:52:50:82:3e:cb:
                    ae:91:24:79:0e:af:52:1f:d3:a0:4f:b2:8d:06:2a:
                    a7:3c:55:d9:88:1a:b6:6b:b5:0d:11:7b:55:16:ee:
                    cd:49:1d:e8:ab:e7:d6:42:6d:62:4c:30:0b:e5:51:
                    c4:ef:ca:43:02:c0:88:9e:be:0f:01:8f:32:fa:68:
                    31:a7:0a:8b:86:21:a9:b1:53:fe:06:fc:5a:dc:a3:
                    6e:3b:87:e1:e6:10:89:c2:12:b3:b0:19:fc:2a:dd:
                    48:1a:22:27:90:80:e5:dc:06:5a:38:76:ae:fc:de:
                    ff:90:0b:1c:ae:14:ec:3b:cf:bd:22:45:a7:c2:fb:
                    e6:0b:e8:cc:51:ef:04:11:ab:5e:27:e4:51:b9:77:
                    95:d9:3e:2c:b9:f0:4f:09:89:e3:34:86:51:f4:75:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:86:D9:11:13:38:52:28:FC:C6:4A:BF:4D:AF:16:80:8D:EF:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.132.0-198.145.143.255
                  198.145.225.0-198.145.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:16:4b:ce:90:5d:d5:0f:bf:9a:09:d1:01:ad:7e:8e:20:09:
         d8:d6:c3:e7:88:cf:0a:97:b9:65:8f:53:25:a0:4c:d2:9e:d3:
         bd:df:d4:0e:30:7f:fd:a0:8a:2b:45:91:9d:ec:49:9e:83:a2:
         86:48:9a:ed:04:c7:34:07:4f:c3:2f:1f:c4:85:51:74:a9:58:
         cc:f2:53:58:98:ac:ad:c5:f1:09:c6:9f:b0:12:9f:f2:9a:2a:
         c7:7a:a8:b8:58:dc:fb:1a:29:6a:08:38:3d:de:b0:69:df:e1:
         f1:1d:82:1c:a0:d5:86:b4:1a:7b:46:c1:9a:f8:ee:da:e9:5d:
         12:d1:f8:ba:e5:0f:8a:60:2a:5f:ea:cf:d8:45:b7:09:2e:66:
         85:00:5e:3f:d0:cf:4c:35:70:e9:13:e5:a2:54:fe:71:15:fb:
         95:ef:fd:73:a2:b3:9b:7f:ff:80:f7:a0:33:a1:f6:c6:1a:c8:
         be:eb:8a:7c:65:45:8a:11:b5:eb:b6:b2:79:ef:ac:22:3d:9b:
         8b:3e:1c:dd:3c:cb:fc:b9:0a:f5:d1:b9:37:e1:f7:ae:18:b7:
         62:ee:30:8a:9f:93:83:53:d6:17:a8:c6:61:7c:d5:9c:33:9e:
         1c:76:94:8f:87:37:fd:32:d4:1f:d5:09:70:90:b5:e3:b6:80:
         6c:e4:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org