Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
File:                     381aa0d8-0713-3628-808e-2235213b6efc.roa (raw, json)
Hash identifier:          Erl8i4vifHw2DwA7eBxJtiR+1daiR2meoJYZ2oMQo6I=
Subject key identifier:   7D:B7:F0:F8:D9:F2:FC:C5:5B:89:A0:89:64:3B:29:2C:FB:31:FA:D6
Certificate issuer:       /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
Certificate serial:       010D0C9F43285845295293F16CCA191110846180
Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     13943
IP address blocks:        141.193.104.0/22 maxlen: 22
                          199.66.144.0/21 maxlen: 21
                          173.231.72.0/21 maxlen: 21
                          2604:bdc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:93:f1:6c:ca:19:11:10:84:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=848c7312-226a-4838-b2db-484ba3163788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:d5:ea:66:a3:1f:e2:dd:98:82:16:2a:f3:
                    83:6c:1f:58:1a:d8:f1:df:69:1e:fd:7d:d3:1b:c7:
                    33:b8:08:30:09:35:fa:8b:f8:ab:4c:f0:48:6e:a7:
                    33:32:de:8f:47:71:71:91:9e:9e:59:1a:9c:31:c1:
                    83:7f:1d:3c:7a:18:52:4b:df:60:00:28:e2:52:62:
                    11:0a:d0:73:83:17:39:5c:75:75:87:b9:63:99:b7:
                    8a:99:87:4a:d2:04:85:40:dd:ca:89:24:7f:eb:0c:
                    67:8d:42:ce:fd:79:70:83:e0:5a:b3:cb:37:4d:10:
                    21:e8:1f:2f:47:77:9a:a4:bc:f8:ea:1e:b7:86:6c:
                    71:7a:8c:24:d9:98:46:4d:85:cd:34:4a:90:1f:da:
                    30:a7:2b:90:d5:04:00:28:0c:b7:17:99:1a:ff:8f:
                    f6:b6:56:6f:af:d9:7f:ad:7e:63:01:84:99:df:65:
                    2c:0c:a6:2c:d6:fc:9d:bf:77:e3:f7:82:96:ec:54:
                    f1:26:29:a5:ad:4e:43:8c:82:59:5f:53:fe:d2:81:
                    1f:71:93:14:68:0a:e1:4b:ed:69:c5:9d:5f:b2:19:
                    a7:73:fa:d6:e3:75:d3:a0:c6:17:c8:9e:58:0b:0c:
                    c8:1a:1c:92:02:1c:bf:a1:b4:c2:41:e0:90:a6:84:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B7:F0:F8:D9:F2:FC:C5:5B:89:A0:89:64:3B:29:2C:FB:31:FA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl

            X509v3 Authority Key Identifier:
                keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.104.0/22
                  173.231.72.0/21
                  199.66.144.0/21
                IPv6:
                  2604:bdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:6c:28:f5:f7:83:93:be:11:b2:94:d2:b0:00:2f:f6:dd:
         66:fd:52:c5:f6:e4:56:b0:18:ad:03:a8:54:07:93:bf:82:4a:
         d7:b1:df:b7:89:0f:0a:0e:97:be:9b:df:cd:6a:45:1e:39:41:
         1a:7e:88:91:41:83:dd:fa:0f:2b:cf:ea:6f:53:13:22:a9:63:
         07:87:26:db:c3:aa:eb:e6:72:e4:9f:85:52:b2:e0:a5:e1:9d:
         88:83:4e:48:65:ea:15:8c:4a:c7:8b:ba:c5:35:43:bb:d6:2d:
         66:35:7c:f0:0b:c1:14:ab:1e:34:bf:4c:01:f3:6b:a4:16:d5:
         db:f3:59:82:d5:1b:f6:f8:a7:8e:68:6b:8f:21:87:42:20:b4:
         47:d9:aa:87:74:d4:97:9e:4c:08:b6:cc:ec:89:cd:99:21:18:
         00:e2:9e:4b:eb:39:1a:52:a1:46:38:4f:78:57:7d:ab:5e:4f:
         b9:7d:f2:df:f6:f3:7f:a8:62:60:f2:f8:6f:44:6c:88:27:e3:
         f4:df:ee:91:e5:fe:cf:d0:e5:64:2c:14:d4:e7:96:fc:a7:91:
         81:ad:03:b6:b3:5a:0a:13:24:96:01:51:b3:8b:e0:96:f7:d1:
         f4:55:0c:8f:f3:92:92:4d:89:af:97:fe:ef:e4:52:5d:b1:2b:
         af:17:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:43:29 2024 by rpki-client on console-fra.rpki-client.org