Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa
File:                     21d91634-ee8c-3230-ab5c-baf16e713980.roa (raw, json)
Hash identifier:          A5s+AuvbzvWPNlb5ZDEYyEuc+tHT53rVt1/agJW5Coc=
Subject key identifier:   86:D0:12:4B:5D:4D:85:F4:C9:7B:C4:DF:3D:AB:99:27:0D:36:B6:FF
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584586D86FAB95C0D00ACC93D200
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     12076
IP address blocks:        151.207.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6f:ab:95:c0:d0:0a:cc:93:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=08daea87-4310-4245-9a20-09d9281d0cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:be:80:55:9c:b0:aa:2d:65:7d:79:3a:8b:
                    e0:c7:0a:41:78:7a:c8:8a:d0:6d:1d:92:89:c6:a7:
                    3d:a2:ab:ce:25:d3:f3:76:11:e9:6a:fd:80:63:b6:
                    ef:eb:52:ac:5d:2a:d3:12:c9:d4:3c:93:70:07:9d:
                    d8:0d:00:4b:c9:c8:59:7a:d5:51:8c:a0:40:6a:8e:
                    de:01:0d:92:97:a8:ce:05:42:73:0c:18:e0:75:11:
                    b2:cd:a3:2b:9c:c7:9c:80:49:c3:d4:f6:d8:b4:4e:
                    8a:99:33:2c:60:5b:0c:aa:50:d7:68:4b:cc:40:df:
                    40:28:60:05:5d:9a:90:31:f5:5b:67:92:ca:b9:e5:
                    30:8d:8e:4f:ae:50:5e:95:26:ed:ea:48:f7:53:50:
                    35:85:73:d9:db:44:ae:b9:be:13:3f:06:cd:56:0e:
                    ae:19:d7:d1:0d:a2:31:c0:bf:a4:1e:6e:88:01:1a:
                    2b:32:36:0d:2e:13:b6:26:1a:a1:d5:96:bc:bc:1a:
                    8a:54:b3:e1:c5:c7:70:69:88:05:53:ce:71:f7:98:
                    f4:da:ee:38:7d:7f:22:fd:16:91:3b:30:d1:20:e2:
                    71:5d:0e:34:35:3a:44:76:9b:f4:85:46:70:7c:13:
                    54:73:f8:88:cd:2e:73:26:2e:44:c4:83:fc:53:85:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D0:12:4B:5D:4D:85:F4:C9:7B:C4:DF:3D:AB:99:27:0D:36:B6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:91:ec:3d:b3:43:e5:ff:19:66:56:06:0a:0b:42:61:79:
         e0:12:d8:b7:16:22:86:46:de:c8:17:f4:78:31:e3:51:d1:e5:
         22:e2:e8:15:27:d6:78:6b:43:89:d4:68:b4:b4:a2:c5:77:78:
         0f:0f:31:66:72:ee:b3:3f:78:f7:ce:3c:5a:30:87:ad:91:e6:
         ee:74:e3:3e:7f:2d:5b:13:15:5e:d2:55:45:9f:5f:2b:47:b3:
         4b:64:e7:46:9f:ab:ff:95:7c:07:e9:ac:0b:e5:db:79:1a:cf:
         f4:10:a7:83:83:b1:89:ee:98:0a:b8:8d:c0:e5:6b:87:53:26:
         1a:a0:4d:61:61:cd:92:87:80:4b:eb:f4:f3:64:9c:e3:9f:ab:
         93:01:69:e2:99:7b:ad:fd:c7:7f:76:d7:68:7f:60:13:c4:a2:
         fc:da:8e:23:77:44:d4:a5:bf:f0:6c:29:b9:18:2a:d8:b8:19:
         8b:d6:45:c6:56:f0:14:c6:28:b2:26:29:b9:b3:de:3a:a5:c1:
         19:f7:70:cb:ad:b2:8e:07:4a:25:3c:3f:a4:f8:29:3a:db:27:
         83:c7:e3:f2:e2:30:3c:1e:f1:5e:2e:89:90:a5:26:7e:9b:41:
         07:4e:8b:c4:6e:aa:7a:05:18:6d:d3:96:ad:14:56:50:77:51:
         c0:42:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 20:51:46 2024 by rpki-client on console-fra.rpki-client.org