Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
File:                     9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa (raw, json)
Hash identifier:          pcyJnANqFw7AJkYOYl1BoxdjxuJ6eK66Tx0MgySA3ag=
Subject key identifier:   B2:C0:EA:6F:F6:99:FB:7D:FB:4B:1A:E3:75:48:BA:54:BF:B1:AE:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456F1DBBB956E18DCCFEF1D07E
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.226.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:bb:b9:56:e1:8d:cc:fe:f1:d0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=87b39440-1ab4-49ff-83b6-a1199d39c28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:fa:a1:5f:44:d9:38:b0:6b:e8:eb:95:91:
                    dc:76:16:60:c9:17:fe:27:8a:d9:d0:dc:81:de:99:
                    55:20:60:2e:8c:32:69:4f:c0:b8:33:41:db:19:a3:
                    79:51:af:46:2a:dc:fc:0e:13:a3:1f:05:ad:60:fa:
                    13:29:6b:c7:bf:dd:56:fe:99:f4:d4:9c:89:ed:e5:
                    e9:b3:4d:9d:11:f5:8b:e9:b3:60:b7:01:19:5f:ba:
                    15:dc:7e:d8:9d:97:49:7d:01:37:8f:41:69:48:ef:
                    b6:e7:c6:f6:cb:d6:3f:ee:83:c1:a0:bf:0d:1b:ec:
                    83:ad:61:02:66:1a:90:52:0e:c8:58:87:76:0a:50:
                    60:da:59:ab:6a:ff:50:4b:72:b2:a1:17:c9:7e:cb:
                    6f:9f:f5:82:9e:10:75:61:61:16:18:b4:e5:d2:9f:
                    06:83:93:67:f3:f3:c5:35:24:cd:82:30:33:2c:87:
                    1d:0f:d6:fa:b3:58:d4:1d:e7:a4:1e:96:64:3a:3b:
                    e6:33:d4:65:d5:3a:db:bf:30:a1:2f:84:f2:e8:66:
                    5e:f7:63:8b:21:3c:72:ce:ee:6d:c0:f6:6f:ca:0e:
                    e8:e4:51:79:b1:a4:d7:a2:90:b3:92:05:6c:68:f5:
                    68:55:2c:ff:15:e2:0e:b3:88:d2:9e:56:7a:6f:96:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:EA:6F:F6:99:FB:7D:FB:4B:1A:E3:75:48:BA:54:BF:B1:AE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:5f:16:33:1f:33:2d:fe:e5:b2:6e:d5:0d:b5:57:55:54:
         ef:2c:03:8e:75:af:e4:d7:c4:83:cf:37:56:95:f3:68:64:59:
         d0:0d:8f:cb:82:ee:65:2d:4b:64:35:c7:ef:fe:30:0f:2d:82:
         ea:17:5f:dc:51:b5:75:1e:7c:0f:20:4c:b4:ed:70:5c:eb:f4:
         22:83:a1:60:a8:2c:f8:88:9b:40:9c:3f:d9:42:73:da:53:82:
         44:a9:1f:4b:d8:b6:36:78:6c:97:98:69:a2:f6:c7:e9:df:b3:
         72:0f:b1:b0:a7:d0:5c:d9:39:e6:1b:43:52:8e:3d:60:8d:82:
         ce:6e:a6:cc:74:10:82:52:2a:d5:9a:cf:95:0c:69:e9:bd:86:
         49:b7:60:ba:f9:14:3c:66:d0:4e:34:d8:6f:2c:e7:5c:00:77:
         2d:56:07:07:13:65:b7:82:68:2d:2d:6a:30:94:99:84:ce:4f:
         a9:5b:dd:a6:25:15:a1:2f:22:ca:0a:b7:9a:8b:b3:a6:12:59:
         5e:53:f4:3e:c0:cf:b5:ed:a4:0a:a5:dd:4f:98:2e:46:c5:ff:
         00:13:1e:ec:fa:ed:e8:6f:1d:0a:35:d1:f0:d4:84:48:ec:24:
         5d:f8:9b:0d:45:95:95:bd:6d:0f:15:e6:74:e4:3b:5d:44:63:
         e7:b9:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:58 2024 by rpki-client on console-fra.rpki-client.org