Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa
File:                     a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa (raw, json)
Hash identifier:          4C6XyDgpDPX5qTskXTxFUvZ7QKw/XxrBzkP+Cuj/IhM=
Subject key identifier:   CB:3C:73:06:50:57:90:84:3E:E5:30:8F:43:B5:FB:05:F9:0C:51:BE
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584585732A345C9D047F4C0EFA00
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     393780
IP address blocks:        208.89.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2a:34:5c:9d:04:7f:4c:0e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=4f3c22e4-ba82-4650-91cc-cb3282427ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:3d:80:6e:9a:93:94:e3:e8:b1:a5:2b:d8:
                    41:ad:c4:56:08:4a:0d:a6:06:ee:64:4f:52:ce:22:
                    c6:36:ed:4a:a8:c6:68:95:d1:ad:aa:3c:c9:45:52:
                    a8:91:01:28:73:2b:51:1b:dd:38:e5:88:0f:f6:b5:
                    a1:f4:8e:7d:e8:c1:33:e9:7c:28:6c:ea:56:f0:26:
                    95:78:c7:05:dc:9e:e3:02:74:a6:bd:bc:74:56:28:
                    7a:6b:68:30:15:1a:4a:ba:ae:ca:4a:f0:32:8e:84:
                    09:56:ab:6d:04:62:f1:f4:0e:e0:08:ee:34:81:96:
                    00:8e:f6:bc:b6:6c:3f:ef:ae:c6:0c:cd:a3:55:d3:
                    95:03:08:3d:9c:5f:0d:bc:80:21:12:13:bf:80:46:
                    af:bd:15:a3:3e:40:38:9e:b3:4f:e1:bc:56:95:ef:
                    15:f5:df:e9:23:6d:de:06:0f:1f:61:1e:64:be:49:
                    46:e1:21:5d:37:07:1a:e0:ab:11:77:8d:44:a5:2a:
                    c3:8f:44:78:bd:fa:4f:e0:aa:51:b5:a6:11:ef:56:
                    09:de:c4:9a:cb:1f:77:f5:8f:d5:a2:04:79:87:e9:
                    7e:b6:7d:2b:5b:37:f4:ac:a1:a9:82:32:8e:9e:cf:
                    0f:6a:dd:fa:c0:85:58:3a:bd:3b:39:1a:2a:eb:42:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:73:06:50:57:90:84:3E:E5:30:8F:43:B5:FB:05:F9:0C:51:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:81:28:76:ba:25:13:02:a1:d3:73:cd:01:7a:58:a4:96:
         fe:ab:5a:8c:50:4c:58:2f:61:ec:38:1b:c0:c7:f7:be:5d:01:
         9b:1c:a1:11:93:96:fc:91:72:d6:5b:26:d0:0d:af:c6:91:13:
         c1:3a:d0:a5:5a:13:0f:86:6c:d0:20:14:8c:72:56:70:d0:6c:
         04:79:da:96:9f:f4:81:a6:99:a6:84:8b:d8:0b:8e:ff:a5:ad:
         93:21:94:0d:bb:77:46:af:7d:07:3d:18:e9:00:ef:c8:72:0e:
         ab:69:d4:5b:86:be:3c:57:52:31:fe:ed:44:59:df:9f:db:1f:
         82:19:59:45:5c:f9:4a:5a:8a:03:a4:c2:71:ce:a7:8c:fd:86:
         44:8b:a1:3e:ae:19:fb:a3:d3:34:a6:ec:8d:8c:99:59:06:be:
         bc:82:fb:67:67:04:16:63:c2:76:35:79:65:69:c9:79:c4:92:
         09:0e:db:b0:2b:4f:3d:5e:98:3d:9c:02:b9:72:7b:ae:5c:09:
         41:39:7c:af:80:1c:ef:38:7f:71:5e:2a:c8:b3:4a:a3:06:94:
         a0:f2:4b:b8:0f:73:70:45:ae:85:92:d4:26:13:87:6e:df:cf:
         27:c6:1f:4c:b0:34:57:ce:e4:02:9f:4e:4a:a1:e5:ff:e3:6e:
         4c:7f:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:29 2024 by rpki-client on console-ams.rpki-client.org