Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
File:                     d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json)
Hash identifier:          imnEpIz6jF5ekIYO+/hQHPSacybU0PBfWL2MZSGAhNQ=
Subject key identifier:   98:B8:EB:7D:12:96:59:5F:05:03:F6:AD:A0:08:22:11:CD:60:00:94
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285844CD4FC39F6AB6840C1FDBC780
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
Signing time:             Tue 06 Feb 2024 14:00:30 +0000
ROA not before:           Tue 06 Feb 2024 14:00:30 +0000
ROA not after:            Mon 06 May 2024 13:00:30 +0000
asID:                     397373
IP address blocks:        192.158.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cd:4f:c3:9f:6a:b6:84:0c:1f:db:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Feb  6 14:00:30 2024 GMT
            Not After : May  6 13:00:30 2024 GMT
        Subject: CN=337fcc67-a4ff-40ad-876c-693b51678385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:3b:d8:a5:c8:e8:13:d0:01:92:8a:1d:31:
                    23:44:eb:a8:29:dc:a5:06:1b:1a:bf:e9:ab:b2:bd:
                    38:e5:94:33:05:d6:14:43:67:92:c8:a7:71:95:2e:
                    b0:96:0b:86:eb:99:d7:40:da:22:03:12:d2:4b:7a:
                    ad:65:5b:33:ed:fe:31:09:0f:96:32:9b:12:62:ff:
                    d7:e0:da:5e:8a:4d:f9:7e:46:c2:85:18:8b:1e:b3:
                    94:58:9d:a6:56:40:9e:4c:8a:8f:19:86:58:0d:90:
                    63:bc:21:05:1f:db:81:36:bf:09:d9:63:11:d5:10:
                    9a:b7:4c:16:d2:96:ef:5a:c8:e8:b5:a9:2e:04:bd:
                    ce:7f:82:3d:44:da:de:96:37:05:ec:da:25:32:6e:
                    7e:a9:45:3c:85:f7:4e:02:72:26:9c:a6:45:7d:b3:
                    91:ec:4f:41:a0:89:6a:69:23:a5:6f:46:a8:13:d3:
                    32:1e:cb:a6:18:dc:86:22:03:38:72:c7:b6:53:75:
                    7a:ea:72:fc:a7:7f:df:eb:b3:b2:07:06:1d:41:44:
                    fc:3c:c3:35:03:bb:52:4b:56:5e:e3:eb:00:47:fa:
                    b2:99:9f:8a:21:2f:51:b0:79:94:85:56:31:17:95:
                    c0:ee:cd:6d:a4:5e:75:ef:c6:6a:ec:10:85:70:d4:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:EB:7D:12:96:59:5F:05:03:F6:AD:A0:08:22:11:CD:60:00:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:12:e6:de:ef:99:c7:2a:db:7f:b8:06:51:e9:53:10:c5:80:
         c6:5e:a8:b8:79:d9:be:5b:39:76:b5:9b:0f:47:08:46:fd:0b:
         e6:04:01:24:85:50:0a:d0:b2:5a:3f:15:9e:5e:12:2d:34:30:
         99:48:79:44:37:7a:64:a9:77:2e:e4:de:5f:39:71:13:d5:06:
         a8:f1:26:9e:a7:88:e7:d4:0a:94:26:18:f3:9b:85:02:a9:a8:
         bd:6e:d1:8a:74:a8:77:0f:44:d9:66:d9:c2:f4:84:d8:d5:4d:
         b7:a1:29:d6:7f:8d:46:d0:46:70:5d:40:06:68:b9:7b:38:9d:
         c4:3c:15:a9:69:fc:6f:f9:51:7a:fb:dc:35:a4:9d:63:94:51:
         a0:30:9b:7d:35:e5:d0:9e:b1:e7:d7:29:f4:d9:cf:49:31:9d:
         3c:fe:48:48:5a:59:10:e6:7e:03:8e:fb:0e:ad:b0:e5:ba:0b:
         81:0e:52:23:66:6f:04:04:db:59:93:6a:cf:53:a4:b4:94:82:
         7a:aa:9f:31:24:04:8e:01:d3:82:2e:07:2d:a3:e0:62:3c:6a:
         00:3d:0d:6c:d0:a6:06:71:41:04:5f:b3:51:29:2c:74:d9:29:
         f5:56:bd:2d:9f:b3:dc:c0:09:be:d4:5b:6a:33:84:6b:76:d0:
         eb:2e:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:10:45 2024 by rpki-client on console-ams.rpki-client.org