Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa
File:                     f74fa0c9-0176-30b1-81ff-5ee642002cda.roa (raw, json)
Hash identifier:          G8WXBrN7F7SM7Tl2YCGZ/+5cUrbGpcflsUiY8ekRIig=
Subject key identifier:   56:A4:6E:03:F7:BC:B7:9A:BD:A6:9B:B9:92:AA:59:BB:86:D7:67:5E
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED0059A4449C8910CD3F780
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     396481
IP address blocks:        152.44.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:05:9a:44:49:c8:91:0c:d3:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=226d8802-e086-43f6-8f35-0df4936471b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:db:ad:56:08:d9:10:be:ef:9f:e5:a5:17:
                    eb:4d:e9:aa:1d:1e:4f:bc:5b:8c:82:4e:1e:09:cb:
                    d0:48:ac:87:9e:1d:6b:a0:82:18:2f:99:5b:ce:6d:
                    e1:1a:0b:9a:04:e1:38:db:f8:be:3a:f0:f2:69:b8:
                    d4:28:e4:1e:c6:5b:f7:59:e8:b4:45:69:67:8b:48:
                    2b:e6:64:6f:e1:fb:64:7a:be:9b:8a:c7:8d:41:19:
                    b2:db:f8:d9:ca:db:5d:ed:7f:8d:34:de:59:bd:0b:
                    12:f0:50:55:d5:1c:f9:6a:c9:0d:05:00:5c:cc:5e:
                    bc:cb:7f:f2:54:22:14:97:7c:9b:88:65:f4:4b:aa:
                    3e:68:b2:b8:66:68:ac:04:3a:4c:14:18:19:13:d4:
                    1f:af:e8:5b:01:a8:3f:1d:2b:b5:d3:0b:7d:b1:42:
                    4b:c0:2f:4f:f6:46:73:55:b1:a9:72:93:f8:ed:1d:
                    67:dd:be:cc:b4:d1:f7:f9:68:8a:52:88:e5:d6:8f:
                    7a:fe:95:e8:cd:bb:4d:df:1e:02:a2:c4:52:a8:18:
                    b7:ba:af:ea:20:c0:36:4a:45:4c:a1:ff:0f:ba:f7:
                    94:f6:2a:8a:4d:50:66:a5:ae:4f:bc:f7:97:fc:97:
                    30:46:3d:0c:76:5b:e8:5c:28:76:74:1e:6a:aa:f7:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:6E:03:F7:BC:B7:9A:BD:A6:9B:B9:92:AA:59:BB:86:D7:67:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:d8:db:6d:d6:35:e1:cb:9a:06:16:6c:ae:01:dd:3a:46:
         1f:d5:d5:68:fa:ef:18:85:9f:57:52:3b:d9:a9:a7:9e:be:80:
         d5:67:28:05:58:41:eb:00:fd:7e:74:fa:1f:9c:22:f1:c3:75:
         48:5e:19:12:a4:5b:3e:02:80:ab:c4:6d:7e:53:b3:ac:dd:36:
         c4:cf:c1:93:23:bf:7d:97:a2:8b:5f:bf:2e:3a:a6:f6:bf:ce:
         4a:b6:14:dc:8f:97:ef:6d:5f:b6:7f:6a:01:40:a4:87:4e:35:
         44:a1:d8:95:02:60:91:7c:39:90:29:f7:f7:24:78:14:a1:29:
         f8:99:4b:46:d3:78:da:3c:31:ef:c4:73:cc:85:71:6b:cf:91:
         66:7f:b5:7d:6b:d9:93:18:51:5e:89:ee:fc:60:fd:66:4b:93:
         d9:8a:dd:13:37:33:cb:a8:3c:a6:0a:9a:9a:dc:99:d5:16:7d:
         8d:de:d3:c5:5c:4d:6a:24:20:5a:cd:b8:57:3c:f1:fa:50:35:
         c0:56:ad:b0:49:91:e5:41:2f:7a:7d:82:45:62:f8:6e:c6:b0:
         d6:e5:cd:01:98:07:cc:de:39:88:90:5f:76:fb:df:e4:fd:57:
         ca:5d:2e:31:ee:d6:4f:43:3e:35:be:d0:7e:29:22:c9:6c:fc:
         29:5e:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:05 2024 by rpki-client on console-fra.rpki-client.org