Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa
File:                     9a076cba-01e2-3a07-9207-a8e38727cb87.roa (raw, json)
Hash identifier:          1f/s3/Pme60Wjthc1hEvvULobo0Kq/MxVr2kpFLF5hw=
Subject key identifier:   13:D2:46:98:C2:63:71:F7:F8:9A:A5:E6:A9:43:BF:0E:B3:44:F5:42
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F43285845549823643AF7EF6C1C36B480
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        204.194.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:23:64:3a:f7:ef:6c:1c:36:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=4d7ed6d4-69dc-4504-b8a9-f142c93036a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:c1:0d:4f:c3:ea:62:59:b7:98:a2:bc:c9:
                    ac:10:5e:a0:8a:ca:8e:10:4a:98:99:78:eb:b3:97:
                    e6:2d:56:2b:e9:c0:e8:4d:1f:78:0f:18:16:21:bc:
                    c4:dc:d0:cd:f5:e4:d8:34:db:5c:f9:4b:58:22:a2:
                    93:c1:f4:a7:bd:e2:17:22:ea:55:da:9e:7c:a2:dc:
                    a6:01:e3:75:83:12:4c:6e:be:23:4e:34:f1:75:60:
                    e7:90:91:c2:13:f1:00:e2:60:7e:97:a1:13:4a:15:
                    ba:d5:a8:53:72:82:0b:9e:93:aa:95:2d:a4:5b:66:
                    e5:16:6b:22:2f:ca:e0:d9:de:b4:2a:5f:ff:64:e7:
                    bb:0d:c5:3a:e4:bb:d3:b3:26:d7:d0:c7:4a:8a:a8:
                    9a:7d:b1:b9:9b:7c:f8:23:e2:1f:91:68:5e:92:7c:
                    e8:ed:38:73:bb:c0:28:fb:47:7e:4c:97:28:c3:4d:
                    cf:3a:5c:5e:f2:a9:e0:86:e3:f3:ab:2d:c1:23:d2:
                    29:51:ea:4a:c5:2c:a3:cd:8f:d8:36:6c:6c:66:1b:
                    e8:bd:e0:a5:44:12:f1:fb:1f:15:7a:6b:a1:e3:36:
                    be:72:67:23:36:12:7a:3a:4c:81:9b:36:d3:5d:7f:
                    ce:e8:3c:1a:56:2e:93:8b:0c:f1:ad:5c:c9:d9:aa:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:46:98:C2:63:71:F7:F8:9A:A5:E6:A9:43:BF:0E:B3:44:F5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:5a:6a:5a:7b:b9:44:d7:cc:09:8a:15:0b:3b:ad:48:58:
         d7:3b:e7:5f:1c:72:92:d9:a6:c3:3b:e9:86:55:c3:c9:a2:96:
         3a:0b:bb:92:98:aa:51:e8:fc:ad:35:e7:48:95:bd:9a:00:86:
         16:d1:98:51:c6:63:76:f7:da:bc:9e:ef:f6:13:7a:e6:36:e7:
         37:d4:c9:b9:a2:be:81:73:56:0a:50:94:73:8b:bd:7f:57:75:
         43:85:56:8d:9c:d5:57:00:40:d5:8a:5f:d4:49:31:bc:c5:e8:
         b9:77:cb:56:7d:39:9c:4f:de:98:5c:59:44:60:9e:29:6c:b5:
         1f:fe:c5:37:11:7a:c5:2d:4d:d2:21:0d:2e:60:b3:25:81:70:
         f8:43:6d:4c:15:68:90:87:19:f5:f7:ab:ec:ad:70:57:f2:d9:
         5c:f1:cd:f9:61:1b:6e:44:ba:8a:4e:89:e9:94:16:ac:4d:6b:
         c0:65:da:5e:4f:0b:90:9d:d9:bf:9c:51:6f:ef:90:5d:f3:d8:
         20:b6:d0:bd:77:73:b6:d4:f0:a7:5e:d0:4f:88:87:8b:ff:4c:
         73:3c:9c:38:34:69:35:d4:e8:bd:77:d0:1e:3c:29:ae:b9:80:
         6f:e7:ca:94:24:33:5d:71:c4:55:f9:43:50:f4:30:fd:06:bb:
         c1:60:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:18 2024 by rpki-client on console-ams.rpki-client.org