Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa
File:                     9a56588a-a022-38cf-a593-5622658a6eae.roa (raw, json)
Hash identifier:          qJL9Cz6hm2LeoD09+lcl+8KKWIFbgi7l15MBNqAdx44=
Subject key identifier:   1E:73:83:AB:4B:AE:09:CC:ED:97:76:B8:65:81:27:98:DF:B2:14:64
Certificate issuer:       /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e
Certificate serial:       010D0C9F432858452D82856429A1AB995D8FBCC0
Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     8075
IP address blocks:        207.229.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:85:64:29:a1:ab:99:5d:8f:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=1a80707d-3afe-451c-93da-7cfd6b3e9501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:3f:ad:46:37:7e:10:8e:85:69:f2:77:3e:
                    1f:9f:74:57:04:e0:85:f4:a6:2a:7d:22:65:09:58:
                    e5:49:d1:1d:b9:63:77:ee:fb:87:92:47:3b:5c:29:
                    f9:10:d6:1e:d2:b1:c4:05:96:84:a0:71:04:d1:4f:
                    9d:67:ed:2d:ed:28:dc:3d:dc:c7:8b:3c:77:a9:27:
                    a7:21:21:54:a7:a8:14:b8:5c:d6:d2:5e:a1:12:9d:
                    2f:df:24:96:ce:3b:66:be:f2:37:c2:96:70:8b:1a:
                    00:b3:83:88:a0:69:0f:b8:4d:6f:8d:6a:7b:fa:1d:
                    c7:04:fa:83:e1:4a:6d:e6:ac:12:c3:76:46:fc:27:
                    89:be:86:65:37:2f:9f:02:18:28:e1:45:a1:26:34:
                    86:40:b8:52:c6:6f:7a:a1:fb:4b:2f:9d:f2:30:e2:
                    68:b1:f6:04:d8:bd:dc:5f:03:98:db:e4:b5:3e:07:
                    e7:78:eb:89:bb:1b:c0:4c:9e:2c:0e:23:82:3d:18:
                    32:35:22:15:34:d1:81:2e:b6:0d:43:5a:72:d5:14:
                    8e:b6:91:3c:f0:5e:c7:b5:8d:fc:79:e9:08:72:52:
                    57:c7:0e:e4:b7:5c:f2:9c:0b:8c:26:58:6c:ac:ea:
                    f6:4f:b5:7e:b2:fb:ec:6b:d4:fe:8b:73:9d:a0:a8:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:83:AB:4B:AE:09:CC:ED:97:76:B8:65:81:27:98:DF:B2:14:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl

            X509v3 Authority Key Identifier:
                keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:1f:44:3f:2e:e8:92:47:9e:67:76:3f:77:cd:dc:ea:c2:
         16:c6:85:9e:31:56:cf:9a:e2:62:d0:ae:ba:2b:5b:ad:47:d6:
         5e:d5:21:3d:04:04:74:b8:5f:4e:88:5b:a6:ff:11:4e:11:41:
         1a:46:72:c4:1f:93:70:18:25:c8:85:f6:40:65:d5:dd:a3:00:
         17:3f:fa:5f:83:46:b6:59:e8:db:91:de:82:f0:e3:e7:da:73:
         6f:91:11:9b:6d:d2:c0:2b:cb:28:ed:27:4d:63:b9:ee:9a:be:
         9e:44:12:8d:2d:d6:d0:2e:1f:9e:8c:39:c4:d5:11:48:3f:05:
         d0:46:26:f7:64:1a:7f:03:cc:3e:34:e6:fd:cf:2f:24:cb:f8:
         92:41:3a:ae:63:99:6f:6b:21:b3:a6:ca:96:a8:ad:97:4c:0b:
         ae:19:43:ca:14:88:75:8a:8a:5f:3b:1f:38:b9:68:64:a0:46:
         79:c4:39:c7:2f:5e:65:51:c8:8d:5a:84:eb:b6:c7:e6:6f:2f:
         32:ec:bb:2e:16:6d:1b:39:41:7e:c1:1a:5c:70:d6:3a:7a:e3:
         d7:77:6f:e0:33:ab:5f:72:04:ca:68:e7:11:60:21:8d:0e:6d:
         d8:50:b6:26:aa:fc:c8:dd:43:b7:fd:1b:58:7c:e9:c1:96:4b:
         d8:e9:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:13:01 2024 by rpki-client on console-fra.rpki-client.org