Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa
File:                     d43ad295-d75e-3f69-b025-76b3a8084087.roa (raw, json)
Hash identifier:          wuNauCgEkvw5IJKd5VxFxDSfej9Ue2H3tWAM8+Boc+g=
Subject key identifier:   43:FC:A5:61:31:9D:E4:4B:63:DF:41:58:3A:C7:3C:A0:35:49:58:6E
Certificate issuer:       /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial:       010D0C9F4328584521104E0E975BD51D0C578600
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        198.145.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:4e:0e:97:5b:d5:1d:0c:57:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=1f6d92bf-ea53-4813-8165-bbd32eb11e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:6a:4c:c6:40:17:77:6a:f7:4e:82:f7:ce:
                    80:76:e5:0b:9c:3c:a6:ee:73:54:d5:bf:3e:d8:85:
                    5b:57:b1:d1:2a:99:21:34:37:a4:55:b7:0e:93:bb:
                    6d:a5:a5:36:7d:70:b8:03:32:0b:9b:29:26:93:d1:
                    30:df:f9:cc:77:1a:a4:b1:b9:0f:7e:f0:0a:47:03:
                    68:e1:c1:5b:97:a2:a8:ab:69:9d:e4:62:32:d6:78:
                    8e:44:51:ee:e3:14:4c:b2:31:2d:0c:fd:91:da:a7:
                    b7:53:f7:b3:55:56:81:f5:c7:61:fa:c2:98:81:0c:
                    97:d6:d2:61:18:2b:01:33:a2:94:95:0d:b4:96:e5:
                    97:8a:71:88:4a:88:e1:37:73:a2:10:46:9d:f8:57:
                    87:41:f3:33:88:cb:87:80:11:dc:45:6c:cf:fe:97:
                    a9:25:54:9b:61:13:3a:47:91:24:7f:1b:82:ad:e9:
                    7a:26:ab:06:ca:da:5f:b3:be:01:76:48:d3:42:ee:
                    f3:50:ed:47:2a:58:60:3d:c6:7d:13:db:10:ed:1c:
                    35:34:47:38:21:e1:18:f8:ba:2a:9a:78:0f:31:d8:
                    aa:9f:be:3e:b4:1c:b3:66:cf:9f:52:5c:b3:8d:43:
                    10:b3:73:61:58:67:79:dc:8d:c9:7b:28:ad:89:9f:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:A5:61:31:9D:E4:4B:63:DF:41:58:3A:C7:3C:A0:35:49:58:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:2c:41:f6:61:ee:a4:57:af:33:d2:c0:a3:1a:a9:8b:31:
         ce:04:c0:65:f4:4b:8f:d5:f3:7f:b6:91:d0:95:a7:2a:bc:84:
         c3:01:47:b3:41:9e:39:bf:49:84:7e:f5:2e:d5:24:b3:17:73:
         b5:7f:7b:fb:2a:48:b2:9b:44:e6:7c:0b:9d:24:8c:a4:5a:b2:
         b4:9a:4c:00:3a:c9:05:b6:c2:c7:26:e6:92:c4:20:99:b6:b8:
         f4:63:aa:43:f2:94:17:e2:5d:96:68:92:cd:98:55:4a:82:04:
         85:17:ce:ff:2a:a9:3d:b4:9c:3c:d4:f6:d9:4c:a4:f2:32:4b:
         47:43:28:a1:7a:7e:ed:ea:35:7f:b1:4f:1d:be:61:74:ac:0f:
         3c:3e:ea:2c:3b:b5:81:91:20:aa:20:33:7b:33:80:e9:4c:54:
         cc:a7:44:ed:e7:6c:ae:37:59:93:72:f8:f0:7c:d6:0d:28:b5:
         8d:cb:6e:b9:2f:48:23:be:8c:58:ac:cb:8d:e1:07:5c:f3:95:
         2d:4c:e7:aa:f7:f3:ae:5b:47:4c:c8:bc:0a:aa:7f:6c:c4:05:
         65:17:e6:58:2e:08:e0:1b:db:25:fb:d1:90:32:88:91:5c:0f:
         e9:4b:24:ab:fb:fa:d0:69:33:e7:99:a8:98:ba:ef:09:89:cc:
         50:5f:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:55 2024 by rpki-client on console-ams.rpki-client.org