Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
File:                     e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa (raw, json)
Hash identifier:          GjsqbqdPCPDvlbHkPeL0V7X7zRe6DPHIqPzJue6eiN4=
Subject key identifier:   0B:57:38:D2:1F:3A:2D:92:7D:D1:7C:6F:48:53:E8:6E:E6:0E:24:EA
Certificate issuer:       /CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
Certificate serial:       010D0C9F43285844EC054796BBA8CA647E258480
Authority key identifier: 55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     961
IP address blocks:        205.166.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:47:96:bb:a8:ca:64:7e:25:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=de3e73f5-b4a9-4339-9ae6-4edfe658b7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:aa:46:7f:03:37:50:18:82:30:be:a6:35:
                    8d:1f:a8:81:cc:8b:cf:98:6b:46:e9:b0:a8:e9:c6:
                    1c:56:ff:e4:36:8e:55:a1:b5:88:0a:cc:24:32:71:
                    e9:e6:66:87:31:c9:18:4b:03:e6:f3:16:17:db:de:
                    fc:1e:dc:40:43:cb:1e:ed:31:a7:43:87:2b:d8:83:
                    09:22:40:d5:4d:c6:59:63:75:a5:06:1c:13:7a:bd:
                    51:ad:8e:58:0f:10:60:df:77:be:99:26:05:a6:3a:
                    35:45:b2:13:25:64:3e:e6:83:12:a5:51:25:60:7f:
                    5e:a8:97:22:b6:48:6f:a9:a8:f3:00:b9:21:30:47:
                    47:a5:fd:09:b0:3d:07:0a:33:11:d3:69:5e:81:62:
                    c5:2a:e7:e7:e2:d1:45:3b:b1:e6:e3:91:ea:9b:07:
                    97:de:a2:6f:46:02:c1:d7:e4:6f:a6:3c:98:69:cf:
                    92:cf:08:da:96:38:dc:68:71:40:00:de:28:44:25:
                    f6:e7:85:5c:e9:f6:41:a8:7b:28:a5:62:d3:31:ed:
                    e2:20:ff:43:b9:dc:9c:fb:48:09:3b:46:80:37:a7:
                    aa:75:05:b3:c5:61:79:e8:d0:54:8d:11:25:53:cd:
                    e7:18:32:1f:87:c3:ab:f6:39:d5:8c:56:fc:b4:46:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:38:D2:1F:3A:2D:92:7D:D1:7C:6F:48:53:E8:6E:E6:0E:24:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl

            X509v3 Authority Key Identifier:
                keyid:55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:3d:97:a8:e1:7d:7b:52:c4:9e:3b:88:f9:24:9d:0e:47:
         6e:14:1c:6a:99:77:6e:c3:ba:87:61:a4:c1:5b:2e:39:2b:ac:
         49:28:02:55:20:26:a6:49:c8:81:1e:aa:19:0e:43:c9:30:8b:
         04:24:7e:3d:46:5a:ed:52:a1:61:82:72:9d:25:60:2f:45:1c:
         49:31:1f:66:52:86:22:af:0a:a8:c7:91:6d:d6:6f:af:76:6a:
         b4:90:9c:b1:8f:30:6b:2d:bb:71:80:a3:62:cf:33:d9:f7:65:
         de:c8:e2:b3:97:b1:eb:5f:0b:7f:e3:37:4b:95:7d:bc:dd:40:
         bd:79:57:62:8e:f0:f2:8b:87:f0:37:69:9c:89:c4:f2:40:0f:
         a3:09:00:ab:f9:77:eb:47:e4:36:d6:b4:1a:09:f6:e3:65:29:
         66:88:f3:f4:bd:b4:21:88:ee:29:6f:1e:55:5f:4a:d8:4f:55:
         14:33:57:66:87:48:9e:5f:04:2d:f9:63:33:3b:67:a7:8d:1a:
         97:15:b0:7a:6e:48:f3:92:5e:29:b5:0c:c6:91:89:ad:0c:53:
         a5:82:bb:31:05:60:ca:5b:7c:aa:1d:78:28:24:a0:a3:a1:2a:
         fa:8d:88:24:60:7c:87:d3:e0:42:51:85:1a:92:70:b0:1b:fc:
         7c:86:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:15:12 2024 by rpki-client on console-fra.rpki-client.org