Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ea8d4ae7-d695-3751-87d6-41c47d05ffd9.roa
File:                     ea8d4ae7-d695-3751-87d6-41c47d05ffd9.roa (raw, json)
Hash identifier:          W53TdB6ZZRqU+cSfVkQPCyfQ6lQ1ZwguMyweX+GP5xw=
Subject key identifier:   00:81:80:CE:18:3B:B7:10:F5:34:E7:2D:C5:D5:97:91:65:83:64:B5
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584598FDF3656D61DE2CA7361980
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ea8d4ae7-d695-3751-87d6-41c47d05ffd9.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        206.201.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f3:65:6d:61:de:2c:a7:36:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=9cb54c6e-b1c2-4dfd-822d-98c1b2d760aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:d9:cb:bf:09:1b:ea:32:9a:b0:a9:dc:c2:
                    d7:8b:ac:30:f6:b0:0d:88:6d:ed:bf:50:66:d6:c8:
                    a1:50:4a:6b:9a:0a:fb:15:b9:44:9c:67:82:4e:12:
                    82:b9:43:7c:62:3a:10:73:3c:fb:19:09:01:4d:02:
                    b3:e8:d3:bf:a9:76:e0:5b:ec:9c:d2:3a:7a:7c:0c:
                    f1:2d:27:e6:5d:16:88:47:51:a6:5a:14:de:d3:6a:
                    ef:46:92:bb:78:42:d0:76:8b:4c:ac:5b:e4:e2:7f:
                    aa:58:35:df:5a:df:0f:2f:c1:8e:c9:63:31:9f:fe:
                    49:c8:8a:d3:62:18:d8:b4:9a:45:36:7e:d6:ee:a3:
                    18:cb:bb:3f:07:e3:dd:43:0c:cf:37:d3:8f:b3:b6:
                    70:bd:56:37:f7:99:57:13:f0:35:f9:8f:8a:c5:b1:
                    85:74:f6:e1:b3:b9:64:ed:24:ee:89:1f:d4:dc:69:
                    9c:3d:b4:04:e0:83:2e:74:ad:64:13:2f:a7:48:96:
                    c9:24:f8:4a:8f:f3:f8:ad:a8:fd:27:1f:ef:60:52:
                    cd:2c:9e:92:9c:41:9f:a6:02:a3:0a:b9:ff:88:f7:
                    c4:a9:45:bb:73:7b:1e:54:5a:b8:2b:8c:41:52:0a:
                    54:86:55:5f:aa:d0:de:0d:4f:57:c3:30:85:b0:2c:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:81:80:CE:18:3B:B7:10:F5:34:E7:2D:C5:D5:97:91:65:83:64:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ea8d4ae7-d695-3751-87d6-41c47d05ffd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:62:09:76:de:92:da:83:f2:03:2b:72:e3:c6:28:90:bb:
         7c:8e:ae:a7:41:c4:1b:86:e8:4f:2b:54:2e:b2:87:9e:d4:42:
         b9:16:44:0c:b3:19:13:54:6a:52:88:96:35:27:52:8e:17:7b:
         a1:a6:9f:a7:c2:e4:02:b8:6e:50:d1:27:e3:6c:9d:87:f3:67:
         c1:ca:81:14:d0:af:b1:42:25:2f:62:f9:b6:bc:90:9c:aa:e9:
         8c:a0:72:18:bf:62:20:a7:00:e4:aa:c0:21:17:57:a3:5a:29:
         d2:50:ff:bd:83:5e:cf:cb:ea:b3:a2:14:57:c4:e2:9f:76:e1:
         c2:4d:1c:d7:89:06:13:2b:16:0b:a1:d2:f0:d1:72:a2:94:98:
         6b:8a:ba:67:ca:73:91:ab:bf:ef:6b:41:03:3c:ee:16:26:9d:
         d2:4c:c5:cd:c3:e7:df:ce:fd:e1:82:07:88:2d:21:3c:a1:55:
         7c:14:65:f9:29:1d:35:5e:7a:3a:33:a2:e7:9b:00:76:fe:43:
         5e:7b:bd:75:3e:cd:22:58:b5:17:42:4f:49:07:f2:91:6c:e1:
         42:0a:6b:ab:19:6a:74:cf:3f:d0:da:70:6b:78:d6:7f:56:15:
         93:d1:d5:58:2f:f4:c5:c6:22:7b:eb:43:46:3e:1e:68:28:28:
         02:5d:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:43:59 2024 by rpki-client on console-fra.rpki-client.org