Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
File:                     2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa (raw, json)
Hash identifier:          12Z0UT2qwieWH9sIzVRJ5Wu/9QNBuSnXZ7adVi2DPEw=
Subject key identifier:   7B:C5:2C:46:67:5B:14:78:FC:28:28:4D:EC:4E:FE:08:83:10:3E:29
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CAF3E2594F7144CB3B780
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 01 Aug 2023 10:26:11 +0000
asID:                     262287
IP address blocks:        198.145.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:af:3e:25:94:f7:14:4c:b3:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  1 10:26:11 2023 GMT
        Subject: CN=34ca54ed-f02c-41cd-bb78-27173c9051ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:b5:61:93:56:36:ff:77:ee:2b:81:24:89:
                    a9:73:16:de:ad:88:ea:f4:37:8e:31:b6:f0:7b:3a:
                    8b:5c:e8:5d:9a:4a:0f:71:32:26:60:12:d5:f7:5e:
                    34:ee:ef:fa:e7:e4:58:49:b2:54:fd:75:44:57:80:
                    6c:75:3a:0f:a2:8c:b5:60:2c:c3:7b:e1:ea:ce:cd:
                    ce:89:90:f9:85:21:5d:14:04:5f:bc:7c:5a:58:3c:
                    74:ec:66:fd:9a:c9:82:30:fc:3f:9b:cd:67:03:4b:
                    09:4e:d0:2d:0a:d7:f9:10:8d:ea:b0:a2:b3:b0:15:
                    22:6e:79:2d:37:83:b3:87:fa:08:6b:92:f1:7c:88:
                    2d:28:73:66:a1:55:33:f7:e4:8d:56:ab:68:9d:f8:
                    c4:20:76:b0:f6:f3:d2:0f:05:c1:70:c1:53:18:34:
                    02:98:5b:da:48:ea:39:3f:3b:7d:9b:fe:68:b3:70:
                    8d:9d:68:95:80:44:95:0c:ea:72:ca:7f:a1:5b:4b:
                    c7:37:85:21:a2:a2:f4:cf:2e:d0:84:20:72:be:f2:
                    ec:23:5e:e3:4a:cd:1d:d3:53:f5:1b:44:45:1b:fc:
                    29:65:c6:20:42:2b:6e:24:9c:ba:e1:28:73:37:e3:
                    a4:83:a1:5b:17:ac:47:2c:df:52:86:c8:cc:f8:7b:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7B:C5:2C:46:67:5B:14:78:FC:28:28:4D:EC:4E:FE:08:83:10:3E:29
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier: 
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:48:1d:7a:a0:c0:42:a3:29:86:d6:ec:4c:7b:c8:aa:6e:3f:
         3d:f2:52:7a:f1:a4:87:3f:e9:8d:05:32:4a:e3:0a:f9:2f:a8:
         11:4f:42:a1:5f:98:ca:cc:e5:05:7d:6f:17:4f:53:ab:6b:dc:
         3a:43:ff:b0:3d:aa:68:96:55:90:f2:58:bd:ae:b1:db:a7:42:
         09:9d:60:f8:34:2b:07:54:59:b2:ce:89:a8:a9:f3:e9:22:78:
         ed:38:80:3c:de:9a:9c:3f:57:e5:29:2e:2e:47:27:2f:bf:0f:
         b4:fc:6f:61:47:a4:5f:11:5a:38:de:bf:6c:14:50:9c:0f:20:
         2e:aa:b2:b7:ff:05:c8:52:c5:d6:8f:49:4f:20:9e:d1:14:04:
         3b:cd:cb:6f:c2:3d:e5:5a:11:d6:29:6a:c8:29:fd:0c:e6:c2:
         5a:93:a3:da:2a:30:60:21:c4:1d:ae:36:9c:f3:46:9b:35:b7:
         7f:19:cf:43:23:9e:5e:80:0b:4e:1a:fd:2d:ad:fd:df:6a:40:
         c9:d4:4b:76:f1:ea:13:4e:54:2a:65:00:01:04:d9:99:63:0d:
         fe:cd:f0:c1:98:be:8c:f7:09:2c:75:c5:33:fb:9c:fe:dd:7e:
         2d:04:a9:61:5d:9a:e1:78:aa:c7:14:f1:10:22:61:70:72:3f:
         0b:b6:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:13 2023 by rpki-client on console-ams.rpki-client.org