Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/369eed51-2ddc-384b-a5d7-ff64412e7997.roa
File:                     369eed51-2ddc-384b-a5d7-ff64412e7997.roa (raw, json)
Hash identifier:          zZ/lvWPldG8qcdc2vv+AHNG9CvTvjA4fgJXZWu/Iz6g=
Subject key identifier:   7F:EC:20:0B:AE:BF:5B:8F:FA:A7:65:95:E2:D0:5C:59:14:31:FF:F1
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387D2D40DC9EB308B920C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/369eed51-2ddc-384b-a5d7-ff64412e7997.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     19437
IP address blocks:        192.198.204.0/22 maxlen: 32
                          192.198.207.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7d:2d:40:dc:9e:b3:08:b9:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=5e8bdaf8-5539-43d1-aadf-60489af28758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:b2:e9:8c:4f:bc:53:9b:b1:40:6d:6d:47:
                    5b:bf:9e:c4:9e:cb:a0:f4:ae:c2:36:41:59:82:9d:
                    fa:b9:bd:dd:af:89:0b:0a:60:7d:d1:44:3e:3a:69:
                    95:8f:21:76:1b:8a:61:2f:6f:c8:72:47:c8:b3:6b:
                    a3:2e:d7:4f:ab:ef:b8:2c:cf:0f:0c:ed:fb:d9:f7:
                    22:a8:53:71:15:32:f0:aa:77:36:12:e8:1c:19:f9:
                    37:7d:7b:33:ab:81:02:f1:74:60:36:14:e2:3a:4d:
                    68:41:b5:fe:4d:9f:40:ee:23:c0:4f:c4:5a:64:08:
                    25:c5:55:5b:fa:fe:23:27:99:65:93:ab:e4:6b:d9:
                    a9:41:46:17:e4:eb:1a:66:9b:78:0b:d4:b5:69:61:
                    5f:d3:15:18:21:35:fa:4b:14:b2:0f:d9:33:5b:5d:
                    7d:03:3a:89:1a:10:b7:bc:d6:a3:3c:19:0b:64:11:
                    ac:a7:f6:29:0f:06:6a:62:02:44:23:b5:62:06:90:
                    69:4b:eb:52:a7:13:43:83:d6:b5:39:73:21:18:11:
                    ac:d1:a3:62:d9:c0:33:19:72:21:3a:ae:c4:e8:23:
                    b8:bb:fc:23:72:24:95:f0:9f:45:49:fa:a7:94:0b:
                    dd:94:da:dc:b7:08:c4:5a:02:63:bf:7b:f8:7c:c9:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EC:20:0B:AE:BF:5B:8F:FA:A7:65:95:E2:D0:5C:59:14:31:FF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/369eed51-2ddc-384b-a5d7-ff64412e7997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.198.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:85:a9:a6:23:d4:aa:ff:6a:14:85:86:aa:0f:24:ec:4d:cf:
         39:fc:c0:40:f1:5d:6d:04:59:52:58:f0:0a:b4:a7:2f:b4:10:
         1c:26:0b:2d:19:9f:3b:b6:42:a1:e8:e2:b3:5f:5b:7c:57:2f:
         0a:4f:dd:da:a3:bf:94:7c:46:40:d0:da:cd:3b:f0:ea:0d:20:
         41:b2:67:80:be:9c:ce:51:d7:0f:0e:00:54:9c:c9:87:87:ec:
         43:90:9b:74:c7:61:7d:88:28:63:ff:72:be:1d:5f:4a:d1:1d:
         dc:62:36:ad:63:4a:65:05:97:e3:f2:71:8e:7c:a6:91:f5:a8:
         70:f6:d8:bd:6b:bc:3e:20:db:6f:21:df:69:81:e3:8d:f3:ee:
         e7:e5:9d:64:82:8b:02:2a:10:a9:e5:1f:07:32:75:9a:1b:fd:
         b0:af:7e:a8:86:6e:05:a7:87:df:d9:3e:a3:31:f6:82:d6:20:
         d0:ed:0f:83:f6:6b:5f:65:d1:c9:4e:3d:e5:65:c6:12:3f:3d:
         92:a5:f5:29:d9:08:71:29:e1:08:d6:7c:79:32:94:e2:1c:7b:
         ab:9d:83:25:b3:96:cc:4b:24:73:ed:09:08:b9:32:12:fc:ee:
         44:ab:50:36:16:03:4a:98:69:f4:25:4e:b7:59:d0:3e:60:95:
         b6:f0:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org