Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa
File:                     b49125fe-35ba-3ca0-bf4f-39057abb8317.roa (raw, json)
Hash identifier:          Q/ro/tjkjk6Ut1r2lSIUrj3kuibcRzNTSLXd6GjAysE=
Subject key identifier:   88:DD:EF:FF:C7:44:70:37:E3:2C:72:FF:67:52:7F:06:D9:39:9F:EB
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285845883DE65BF4DECC5327CC1D00
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     19202
IP address blocks:        184.170.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e6:5b:f4:de:cc:53:27:cc:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=f575c61e-9d92-4f3a-bc51-e8d7a6bb0f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:f2:bc:22:69:60:55:ba:41:84:12:da:87:
                    ad:3a:39:35:c9:3f:4b:fc:4c:20:cd:2f:f4:92:20:
                    4c:a6:38:b8:7f:99:9d:79:23:d9:dc:0c:40:96:3b:
                    aa:11:2c:fe:f8:94:43:1f:d4:6a:98:c0:e3:06:36:
                    12:30:19:07:c9:85:8b:67:b6:92:65:7c:9b:3f:f9:
                    28:63:58:c1:24:9d:f7:ef:f4:db:6a:a6:a2:db:37:
                    57:59:cc:91:30:fb:49:ea:a2:53:19:93:41:0f:24:
                    68:6a:91:2e:a9:3e:a9:0a:ee:26:d8:22:f6:a5:9e:
                    82:8b:d3:f4:39:67:c9:e6:0c:bd:10:ed:b8:34:5a:
                    a6:a9:3d:b9:f0:9d:5d:93:8f:5e:cd:23:98:77:11:
                    18:3f:c5:b9:83:b8:d9:a3:53:59:ab:e7:7a:ee:c1:
                    73:6b:40:48:a5:f9:04:ee:e0:f6:bb:31:e2:45:7f:
                    34:da:f5:46:4f:44:80:95:c3:38:79:2a:70:ff:50:
                    d7:39:fc:f9:cd:b8:42:46:6e:b7:c8:64:77:b8:73:
                    70:53:59:a3:1e:a3:48:77:01:6c:df:88:a8:66:ab:
                    14:b3:01:ef:b2:28:7b:fb:ba:e3:2b:48:cf:ed:6d:
                    1f:cc:9a:72:1f:fa:38:71:9e:ea:aa:81:65:29:40:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DD:EF:FF:C7:44:70:37:E3:2C:72:FF:67:52:7F:06:D9:39:9F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:45:37:bc:bf:f5:18:b8:8e:f6:0e:5f:9f:b9:25:a2:6b:f7:
         76:1d:1c:0b:b0:85:0e:43:a5:6f:77:7e:92:78:0c:14:10:66:
         3f:00:ad:06:7b:a4:b8:03:80:cc:53:e5:7d:db:a9:28:4a:02:
         a5:4c:db:4a:6e:c4:c3:be:58:1d:96:06:20:66:8d:4c:ff:51:
         94:62:53:52:e1:eb:f4:9b:ab:71:fc:7d:84:11:4d:de:84:58:
         6b:31:2b:76:b8:a0:45:87:f7:37:c7:a8:7b:77:89:1f:ab:f2:
         5e:d7:2b:3c:08:4d:51:21:6f:95:cd:9f:56:5e:79:63:c8:8b:
         ea:0c:4e:ff:f2:88:eb:3b:ca:59:ae:81:77:ed:c4:40:44:cd:
         0b:b9:10:f4:6c:51:8f:b6:a8:d1:fb:9c:f6:e5:d8:d6:a2:74:
         51:1a:1d:5c:cd:c1:d1:fc:a2:c2:e0:22:cc:06:50:8a:1f:c5:
         43:bf:94:dc:5e:b8:40:89:45:91:aa:94:05:80:73:cf:25:8e:
         f3:f0:7b:62:15:7d:3a:f3:87:69:00:9b:a5:ef:d4:68:12:5f:
         5a:3c:e4:c1:f3:58:63:4b:d0:bd:5f:c9:85:87:e3:50:6d:4c:
         6b:b0:79:44:42:12:3d:17:56:e4:1c:23:b1:aa:8f:5c:e5:fe:
         13:5f:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:10:16 2024 by rpki-client on console-ams.rpki-client.org