Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa
File:                     91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa (raw, json)
Hash identifier:          pjgimGLxH9oQFj7CrSrtnqkuzfGbl407VFnr2odndvo=
Subject key identifier:   C9:76:8B:D5:F6:3A:E8:BE:EC:6F:79:BE:83:4C:51:99:47:D3:D2:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455B92E66139ABA48810824E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:e6:61:39:ab:a4:88:10:82:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=4562d75a-e6e2-4d92-b475-6cbe710bb340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:8a:5e:a0:f9:8a:ac:eb:51:84:a0:f0:a9:
                    ba:36:9c:07:97:ad:a4:6c:29:36:ac:4c:5f:7d:48:
                    7d:3d:aa:47:36:3d:e2:2d:8b:c7:3c:c6:52:30:5c:
                    83:7c:01:b8:4a:b9:83:6d:c6:6f:ce:1a:62:6b:81:
                    b9:c2:21:5c:b2:a1:09:7c:09:22:56:2b:2c:d1:43:
                    d0:58:40:98:94:48:67:6f:22:8f:5f:08:22:a8:f2:
                    54:2d:09:9a:e6:e9:90:ce:bd:11:3f:61:fe:bb:f5:
                    c2:c5:2a:36:e6:f7:ee:42:6f:39:bc:af:1e:12:ba:
                    db:5c:3a:74:17:b5:5a:7b:02:e3:6f:7d:ea:71:63:
                    8b:a2:47:81:91:39:b0:b0:7c:87:38:c8:94:11:21:
                    92:b6:32:a4:a9:0b:7e:9a:f5:14:ee:56:1a:86:7b:
                    80:14:cb:29:46:15:cf:dc:60:e1:34:06:71:74:3f:
                    89:02:80:e4:43:0e:82:db:6a:56:e1:7d:6f:fe:ee:
                    c4:f2:06:b1:78:2e:14:3f:12:69:38:f2:36:ff:56:
                    aa:1e:ce:c2:a1:02:4a:dd:20:71:3d:5e:41:5c:ee:
                    cd:d7:6b:aa:d2:77:70:82:77:f4:fe:7d:bd:a7:af:
                    34:e6:34:16:83:3c:9e:99:a2:e6:ef:8e:06:42:64:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:8B:D5:F6:3A:E8:BE:EC:6F:79:BE:83:4C:51:99:47:D3:D2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:be:f8:80:eb:ee:4c:be:fd:91:1b:ad:e0:70:6b:89:c9:59:
         85:fb:23:ce:cd:5b:5a:7f:31:f8:3a:a2:2f:56:45:90:84:20:
         38:27:1d:a6:6b:00:2f:74:02:7e:df:13:d2:19:0a:1e:fd:79:
         7e:ac:55:ac:34:d1:96:c5:16:af:6c:ac:3d:d0:13:4e:bb:c2:
         da:05:67:a4:af:a6:63:6d:97:28:76:67:30:47:2d:c4:16:07:
         93:4f:a1:a8:62:37:3b:9f:27:9f:e7:e9:2a:56:26:2b:86:86:
         ad:d6:e7:bc:ec:68:d2:f6:62:1f:29:b5:8b:6a:d2:6a:a8:e5:
         5b:a2:8f:00:1e:23:02:5c:08:80:0c:c1:59:dc:61:3a:6d:7c:
         58:12:d7:66:52:1f:28:27:55:83:ce:dd:26:a7:4c:7f:d0:9c:
         af:88:75:fa:96:74:fb:db:fa:e0:36:af:90:9c:72:b5:dc:c6:
         28:2d:60:ad:3c:95:27:98:c9:89:97:e6:64:41:79:ae:13:72:
         58:34:9b:57:c1:0b:98:e9:0b:6c:3e:07:f4:9e:97:d9:19:30:
         b7:45:a2:ba:41:51:07:db:0b:0f:3b:92:ec:20:f2:29:c5:97:
         3d:ac:d3:b4:f9:a2:b3:15:90:c7:04:2d:e7:f7:17:da:ea:2a:
         2b:f2:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:33 2024 by rpki-client on console-ams.rpki-client.org