Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa
File:                     c539e820-1aba-30e3-8390-0ea813b57848.roa (raw, json)
Hash identifier:          A156Y+7ENLM7UmzF9BYGz0LWMAHql+4vTheKGtsUhEw=
Subject key identifier:   92:3C:88:D5:12:B2:29:0B:92:2C:D3:0F:98:AE:7E:EE:53:73:81:DA
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285845A163A120A96DD719DD4E2C00
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa
Signing time:             Mon 22 Apr 2024 13:11:58 +0000
ROA not before:           Mon 22 Apr 2024 13:11:58 +0000
ROA not after:            Sun 21 Jul 2024 13:11:58 +0000
asID:                     400238
IP address blocks:        147.185.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:63:a1:20:a9:6d:d7:19:dd:4e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Apr 22 13:11:58 2024 GMT
            Not After : Jul 21 13:11:58 2024 GMT
        Subject: CN=dfcb06e2-47cf-4b40-ad5b-018c1da509d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:44:e7:20:57:0d:b9:b4:c1:4c:0e:8a:4c:
                    2d:15:4b:86:6a:90:1d:04:fd:e8:7f:9b:e8:5e:32:
                    bf:a8:77:eb:21:75:d0:38:64:72:e1:7e:05:58:f1:
                    95:b2:c1:61:38:8f:bb:e0:ea:a3:29:ba:d1:bd:cd:
                    67:76:8b:eb:ef:dc:06:9c:01:ee:ef:ed:a6:19:72:
                    f0:70:5d:71:1a:9d:64:be:38:89:ab:49:84:b6:fd:
                    84:ac:e2:0d:13:83:a5:a5:bf:6d:d8:14:8c:6f:ae:
                    15:16:2b:dc:f0:b7:77:3d:73:d7:85:c6:fa:6e:58:
                    db:94:be:ef:bc:f4:66:77:cb:3f:1f:84:28:52:46:
                    28:4a:8e:7d:68:16:04:f5:f8:d2:57:d0:94:36:31:
                    2a:f3:86:5b:6f:e9:fa:83:7f:7a:e8:18:6a:4c:90:
                    92:d5:bd:50:9d:e2:b2:71:bb:d4:c8:0f:16:f9:15:
                    70:c8:a2:cb:be:46:43:e3:b8:61:eb:f0:e4:82:c5:
                    87:03:86:33:47:57:a0:6a:2c:d0:0b:f9:c6:f3:eb:
                    8a:ae:b7:6b:b2:57:88:56:5b:bc:78:61:ac:18:5a:
                    66:87:7f:40:29:1f:ca:ac:d9:0c:bf:e2:a5:58:d8:
                    34:0d:12:09:66:f7:06:51:1e:1c:1b:a0:5b:c0:ca:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:88:D5:12:B2:29:0B:92:2C:D3:0F:98:AE:7E:EE:53:73:81:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:39:62:0e:51:a5:19:f7:f9:73:87:10:c2:44:04:e4:79:
         42:55:60:01:26:af:28:cc:75:07:22:ff:17:d8:98:27:bf:a7:
         34:00:0b:37:96:01:63:6a:e8:27:84:aa:7e:1e:f2:08:09:44:
         43:f2:68:1e:d1:a3:40:95:1b:34:0f:0c:da:b2:3f:4f:af:28:
         f0:e8:b1:c8:cc:76:80:0c:fe:35:a0:df:46:f0:64:46:74:49:
         52:c8:72:ff:66:1c:c6:ec:9d:57:d5:55:3e:18:93:1f:ba:56:
         6d:7b:bd:81:aa:3d:df:4f:7e:c6:f3:cf:48:8f:61:c7:51:f4:
         87:c5:05:68:f1:95:3b:f2:7a:89:78:90:19:e7:cc:c7:ae:cf:
         9f:25:1a:59:25:33:49:66:2f:d4:e5:29:75:69:fe:ba:21:af:
         fa:d4:d2:63:8b:a7:e3:a5:26:85:1b:51:b2:b3:b1:16:fa:78:
         1e:36:08:ed:ad:79:cd:25:3c:97:81:67:86:85:bc:ae:86:cc:
         9f:e9:d5:c1:2c:0c:33:8d:d1:73:1f:8f:f4:fa:a5:2f:de:bb:
         f1:be:f6:76:0a:4a:de:ce:ec:de:18:19:a7:90:97:14:2d:1c:
         7c:34:64:79:86:52:34:c4:9f:d8:4e:06:df:3b:0a:59:99:7e:
         5e:49:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 20:44:03 2024 by rpki-client on console-fra.rpki-client.org