Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa
File:                     0ab80909-a430-3e11-b205-e1a70373741a.roa (raw, json)
Hash identifier:          gNbvvLsdxtjnvODrMOS9lQPlJBEQ4vCbo6F+32iUSdA=
Subject key identifier:   45:8C:0A:CB:79:2D:53:35:7B:FE:E1:0D:78:A9:D0:57:AC:17:37:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455B92E8CBBA7E11C9A3172A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:e8:cb:ba:7e:11:c9:a3:17:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=0d4bf1e8-4a89-4672-b745-36f4eed3aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8d:48:e2:4c:d0:df:7d:fd:92:f4:a1:7f:d8:
                    1d:69:a5:1d:ca:8e:b5:fc:f5:f3:2f:61:7a:c7:6f:
                    b7:1d:47:21:c6:50:1f:05:ec:93:69:bd:7a:fa:66:
                    55:fc:42:6b:e4:b2:8f:70:e5:e5:9b:5f:e9:cd:33:
                    cf:0f:f3:d7:3b:78:be:26:a2:c1:7e:60:46:09:84:
                    6a:ab:78:73:fd:c3:53:ce:54:d7:3b:c8:38:c9:13:
                    57:85:2f:35:c4:b4:5f:d7:77:ea:e0:1d:9f:8c:8a:
                    ec:c5:2b:f5:b1:cf:7d:1a:cf:fd:22:fa:54:03:45:
                    6a:94:77:33:c6:b8:a6:51:15:92:c4:20:13:e9:46:
                    04:d1:40:94:8f:ba:f9:c4:e3:7f:11:68:07:04:a6:
                    ad:58:cb:0b:90:d4:bf:42:33:be:e3:0d:60:d5:b9:
                    ad:64:5d:d8:f2:11:58:54:28:14:42:f9:ed:89:2c:
                    96:e2:72:d8:c2:9e:d3:51:64:9f:70:a2:e1:b2:02:
                    e8:a0:17:7d:ae:31:38:71:d1:5e:3a:1d:00:6b:9f:
                    e8:e7:e6:8f:24:e4:7c:d2:a0:9d:bf:99:5e:c8:de:
                    3a:34:93:f2:5e:a2:d0:bd:d5:53:74:77:30:82:91:
                    9f:f1:aa:cd:88:a3:40:75:b9:b2:64:5c:e5:2a:3c:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:0A:CB:79:2D:53:35:7B:FE:E1:0D:78:A9:D0:57:AC:17:37:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:86:21:6f:81:52:f1:cf:ec:0f:38:20:d7:72:f8:4f:f5:
         fe:49:74:9f:0e:f2:58:46:04:6f:a7:ad:3e:09:85:15:79:fd:
         06:eb:4d:73:c6:66:aa:1f:ef:eb:44:a4:40:32:1f:f4:20:df:
         b1:50:1a:64:30:0a:fc:18:c7:01:77:85:2e:cf:89:6c:a3:57:
         25:31:05:bd:60:b3:e8:31:59:f2:b1:94:b5:8c:02:d2:dd:b3:
         63:4b:80:f6:a2:7f:16:2d:8d:99:f2:4a:aa:c7:90:7a:e8:0c:
         50:a5:d6:6a:19:20:97:6b:1c:95:ff:29:bd:36:f1:91:8b:63:
         17:de:56:a8:03:50:15:b9:25:f0:31:13:71:b2:ab:57:7e:33:
         96:5f:24:0e:f5:c6:54:93:d3:f0:b3:a8:53:c8:2d:bc:bf:b1:
         89:cd:ae:71:d7:12:b6:81:2c:a4:58:74:1d:59:46:26:9c:b2:
         16:8c:21:df:4e:e2:21:c9:97:30:d8:86:32:2f:cd:93:cf:3c:
         6c:4a:a4:8a:c6:5e:0e:1b:a1:cd:19:25:25:e9:e5:df:73:b4:
         91:7f:6f:1f:2c:79:20:d6:97:30:b5:ac:c5:e1:2a:69:b9:72:
         10:5b:a6:af:75:d3:5c:f9:9c:d3:e5:75:e4:61:8a:d0:e8:2d:
         74:4e:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:45 2024 by rpki-client on console-fra.rpki-client.org