Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/bdfb77f1-f84f-31bc-84fb-7b5861cc714d.roa
File:                     bdfb77f1-f84f-31bc-84fb-7b5861cc714d.roa (raw, json)
Hash identifier:          qoxhTV35+tHfp5zxIyi1Iag6CzEEiu4SqbFIY5ELjPw=
Subject key identifier:   4B:4E:E5:C9:1F:63:35:CC:59:AE:74:8B:EC:BE:E9:BD:E2:E4:95:12
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285845C0138B567F9E07E6FC1BE740
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/bdfb77f1-f84f-31bc-84fb-7b5861cc714d.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     397423
IP address blocks:        185.167.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:8b:56:7f:9e:07:e6:fc:1b:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=77fa5701-ecd1-4b05-848c-d971510725a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:4b:c7:6d:00:6e:77:30:26:e1:95:af:1b:
                    cd:10:ef:12:63:7d:de:7a:cd:68:51:db:cd:6c:be:
                    ff:44:72:b7:c1:4d:ee:c7:b0:89:15:6c:d6:e0:60:
                    fc:23:70:34:59:5b:f3:9c:eb:e3:a9:bd:f6:ff:24:
                    a4:4c:8e:ba:8b:30:e8:c5:d9:ca:64:27:c3:b6:b1:
                    c5:3e:14:63:bc:f5:1a:92:b0:2e:02:36:5e:a3:3e:
                    bf:12:2a:b4:23:27:12:6b:8b:e7:c3:91:24:bb:9c:
                    66:94:1f:44:45:67:e4:94:ea:83:3b:cd:a9:be:e8:
                    57:1f:c4:b5:27:6f:71:de:99:5e:74:ff:fa:70:f4:
                    06:fc:63:2d:bc:15:70:43:9e:03:b4:78:cc:06:f4:
                    7d:e0:82:f4:b6:f5:10:10:ef:a0:ef:6f:c5:6b:ef:
                    99:3a:66:e0:aa:70:04:54:77:92:0a:8c:c7:ad:dd:
                    d8:91:f9:a2:dc:1d:2e:b1:2c:1e:d8:cf:29:d6:76:
                    3b:d0:0a:cf:1c:46:20:ce:a1:03:95:f0:42:42:60:
                    4b:0f:3b:ad:ff:71:eb:61:0a:e5:dc:7f:92:e4:87:
                    9b:ba:85:56:1b:b0:21:81:20:f5:28:4f:66:40:3c:
                    e3:79:bb:04:a0:14:11:7c:a5:b6:eb:0f:cd:09:3b:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:E5:C9:1F:63:35:CC:59:AE:74:8B:EC:BE:E9:BD:E2:E4:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/bdfb77f1-f84f-31bc-84fb-7b5861cc714d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:c1:8b:62:77:84:18:f6:0e:56:25:e2:bd:c3:37:ea:45:
         7f:27:14:75:90:36:98:1a:82:a2:22:ec:38:ca:37:a6:50:04:
         3f:62:08:c2:62:8c:3d:ef:ba:6b:24:fd:b5:28:a1:58:87:85:
         9c:db:f5:fb:e2:14:bc:ea:16:f0:76:47:92:ab:a8:5c:21:36:
         3b:cc:34:17:12:24:fd:fd:c9:4f:f1:16:9e:34:00:f4:3e:9f:
         88:61:dd:09:f4:c5:8e:1c:8e:f7:47:e2:17:84:ab:42:50:3e:
         e2:0f:ad:5e:c4:7a:c8:bf:fc:6f:a8:09:c8:66:4e:0c:b0:7e:
         ab:87:9a:69:9f:3b:a1:74:0d:47:ba:e9:39:4b:54:de:e9:e7:
         45:d2:23:da:c2:8f:30:cc:fd:6f:08:6f:b5:b0:ca:ec:fd:76:
         32:36:25:8c:c7:d5:bb:a0:9c:90:8f:1f:96:35:a4:4e:e4:45:
         f8:a7:9c:b0:d4:78:5f:a8:b0:be:a4:d1:ed:96:b5:df:df:64:
         bd:1c:2c:67:08:c7:d6:ab:2d:5e:36:34:fd:f8:72:c9:eb:b8:
         eb:97:e1:66:b5:4e:b0:d4:38:c6:25:33:6f:a5:78:38:8c:fb:
         11:41:93:cd:5b:c7:0e:eb:2c:a7:11:f9:20:89:a3:97:b1:d1:
         d4:74:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:01:25 2024 by rpki-client on console-fra.rpki-client.org