Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
File:                     0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa (raw, json)
Hash identifier:          M5rff3Nl0fcLJOQWqsLDDKVCWP1TmO5y4l5F7bxXy3Q=
Subject key identifier:   07:6F:E6:BB:DC:B4:D4:6C:93:11:AA:78:7B:AB:1B:0F:F0:BB:8C:F9
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F432858459E9368BD9D766E1987137700
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        142.214.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:68:bd:9d:76:6e:19:87:13:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=a97f70de-1fa9-4f7d-9ee2-3b7bedfb7160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:dc:e9:7c:f2:9c:3b:19:fa:ab:91:88:0a:
                    77:7a:c9:c2:63:16:ba:e0:67:9d:eb:90:20:61:bd:
                    9c:9b:7a:ef:47:2e:fa:db:bd:50:50:a7:2f:44:4a:
                    af:2b:6e:1f:79:12:f7:be:fd:65:9c:16:47:3a:41:
                    01:e5:92:b5:62:fc:6d:39:57:42:28:aa:95:d5:7d:
                    5a:4c:28:17:0c:dd:bf:4b:b3:c8:44:92:17:04:a6:
                    9a:20:96:8f:7f:61:6d:85:6b:ee:82:93:70:f8:27:
                    4c:af:93:54:ab:03:08:6b:62:26:1c:43:d3:70:69:
                    88:4f:48:2d:fa:3c:57:08:c0:a0:14:c9:36:2c:64:
                    12:e8:71:df:df:0c:13:74:f4:38:b7:cb:a0:49:96:
                    bb:de:cb:3e:d7:bd:97:fb:98:df:c0:9c:61:ee:49:
                    13:af:96:d3:d0:dd:f6:d4:38:20:a0:9e:7a:5d:3d:
                    ab:7b:89:b7:65:a2:48:2f:cb:97:87:17:03:b9:bb:
                    e6:c3:da:43:b5:f2:12:f1:5c:7e:95:a0:c1:85:06:
                    76:38:48:3e:90:84:bc:c7:b4:52:11:6c:d9:05:e1:
                    cc:c6:a0:d1:5c:7f:0b:e4:8f:51:0c:a4:41:ce:31:
                    48:c9:48:1a:17:ee:18:cf:db:41:51:a4:07:c3:90:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:E6:BB:DC:B4:D4:6C:93:11:AA:78:7B:AB:1B:0F:F0:BB:8C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:65:b0:ec:e4:d0:bf:6d:65:51:96:d5:b2:5f:f4:07:c5:68:
         ae:df:84:d5:8b:bd:e8:c7:b5:7f:bc:42:f4:e4:32:4d:7e:9e:
         61:bf:d5:cb:21:54:ce:2a:ab:1e:73:c6:0a:5c:c2:76:dc:ff:
         c3:82:ca:cd:2e:a3:b0:28:c8:2e:97:97:bb:b3:ac:13:71:3b:
         a6:e0:f6:0e:49:d5:db:94:ae:d5:29:70:c5:d7:a5:94:d9:dd:
         7e:77:1a:a9:90:d9:f2:07:09:47:f9:18:c8:bd:2d:bb:25:32:
         df:2d:03:ce:7b:3d:64:9a:5e:68:bc:24:20:d0:a8:20:38:14:
         97:b6:82:91:23:b3:57:f9:6c:43:fd:77:10:e5:4b:10:1d:30:
         20:3a:e4:62:07:f9:96:32:72:ee:79:35:a1:c5:74:c1:de:85:
         2c:49:0f:67:15:7a:ed:62:5b:93:cf:b9:ce:dd:3a:30:47:e1:
         96:fb:c6:0a:65:33:1b:59:13:79:6a:c1:26:da:47:f5:b3:87:
         f4:17:86:7a:78:30:00:90:1a:90:42:e5:fb:7d:f9:3d:56:a2:
         12:4a:4c:27:ca:1b:41:cb:5e:98:a9:c9:8d:10:bd:5e:03:31:
         a1:eb:f7:c5:30:8f:78:7a:81:10:45:63:52:fd:84:c3:a1:ae:
         30:a4:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:05 2024 by rpki-client on console-fra.rpki-client.org