Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
File:                     817df46c-74b9-3aae-93ab-75637ef18bee.roa (raw, json)
Hash identifier:          1MnDI9tfNOkFu0ZqJ4h/cLg2HE9rSHeVJkwaI2/h/6Q=
Subject key identifier:   5D:CE:CD:5E:E2:27:2A:BD:73:FF:AF:E6:CC:44:99:54:4E:8F:22:24
Certificate issuer:       /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial:       010D0C9F43285845E7292CB6A2379E11EBC24560
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     11068
IP address blocks:        192.200.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:2c:b6:a2:37:9e:11:eb:c2:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=4b07b17a-3a46-4428-b27d-4034bf704822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:f0:58:6d:5e:03:07:7c:12:2c:54:66:3e:
                    fb:ac:32:c1:95:c8:53:d0:2a:ec:16:65:08:5d:ee:
                    9a:76:56:40:75:70:7a:21:4d:36:3c:69:ae:e7:de:
                    bf:dc:a2:40:91:7d:d7:91:9d:6d:12:41:cf:39:34:
                    29:5a:7d:cf:47:56:d2:98:c9:79:66:47:ae:8c:a4:
                    78:1d:b3:45:08:dd:fc:d0:8e:00:69:2b:3b:1c:a1:
                    08:2a:2e:71:73:2e:41:5e:12:55:3a:d5:dd:d0:fe:
                    7b:27:ec:06:0e:46:b9:09:d4:95:33:6b:93:41:59:
                    95:03:60:6a:c6:bf:e6:33:c7:65:c7:20:bb:49:be:
                    f8:20:b9:7f:18:e6:75:93:71:16:9c:b2:fd:45:dd:
                    0e:8f:fe:4a:fe:c6:1b:5e:4f:06:03:c8:89:10:d0:
                    a5:9d:c6:e5:83:78:b5:21:4f:bd:26:38:eb:87:49:
                    90:6a:12:a2:2f:3b:0f:1d:19:74:e9:da:7c:b7:44:
                    41:7b:4c:53:39:83:3a:7b:97:a5:2b:da:52:81:91:
                    e9:9d:ca:fe:4f:e9:23:71:d9:6b:37:b9:02:19:25:
                    de:55:96:4a:63:7d:d8:7a:6c:6d:fe:84:96:8b:86:
                    d5:a9:8d:5c:df:ac:31:58:29:f2:c5:65:88:0a:63:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:CD:5E:E2:27:2A:BD:73:FF:AF:E6:CC:44:99:54:4E:8F:22:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl

            X509v3 Authority Key Identifier:
                keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:83:8a:c6:8d:af:4a:b9:4d:bf:c2:fe:35:4b:19:db:93:
         da:6c:51:de:c8:a7:bc:d7:81:d3:93:0c:86:25:5a:2c:dd:9c:
         ae:75:db:c4:d7:be:37:28:5d:d5:3f:e8:ac:f4:ef:59:c4:cc:
         39:e4:f5:0e:ce:94:2a:e1:d7:7b:ab:6c:d2:8b:84:88:3d:75:
         44:ba:f7:e4:d7:1e:f8:20:35:2a:a0:5b:ef:f7:22:6b:32:86:
         bc:fc:47:88:51:5a:ad:c4:26:be:c4:ba:ef:ef:d0:eb:7b:c8:
         b7:9f:bf:40:fa:a9:74:23:50:f6:fb:bc:83:b0:2d:f5:ca:48:
         99:1e:54:cf:69:10:e6:1f:3b:43:18:3e:71:a0:a1:0b:06:c2:
         cd:96:5a:65:b7:be:c4:cc:90:08:25:ce:b4:78:49:83:29:3c:
         4a:e0:a5:98:93:9e:60:a4:b1:81:16:93:20:e3:dd:69:c4:64:
         27:c9:2e:f2:1c:de:9b:1b:ab:16:fe:89:a0:b8:43:ca:9d:e8:
         c3:56:54:f1:c6:3a:c1:5b:a8:4b:a5:15:79:d0:77:9d:99:8f:
         6d:b9:fa:bf:b4:c7:61:e5:dd:5a:85:c7:44:19:2e:05:bc:41:
         d9:1e:14:01:be:a5:d1:88:15:d8:ff:01:46:ca:ad:ac:eb:d9:
         7b:a7:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:21:32 2024 by rpki-client on console-ams.rpki-client.org