Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa
File:                     f0431124-a4ed-34a4-a638-36a3a9cf3571.roa (raw, json)
Hash identifier:          L1ntDUgRp9m+qETey/1OHEH8+1cghZ727Wf2Ynn5LVg=
Subject key identifier:   5B:A1:B5:2C:21:A7:CA:1B:67:65:1E:F8:91:1B:30:30:FD:CF:3C:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845931B6507A7DA7BAA0CA77000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa
Signing time:             Wed 17 Apr 2024 10:25:06 +0000
ROA not before:           Wed 17 Apr 2024 10:25:06 +0000
ROA not after:            Tue 16 Jul 2024 10:25:06 +0000
asID:                     20940
IP address blocks:        173.223.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:1b:65:07:a7:da:7b:aa:0c:a7:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 10:25:06 2024 GMT
            Not After : Jul 16 10:25:06 2024 GMT
        Subject: CN=c5ccbeff-1dfd-4d7b-b2c9-2a8244396f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:55:a4:09:1e:48:00:94:57:d0:4f:bc:c0:
                    27:90:cd:88:38:97:8d:33:57:9f:a8:09:b8:2c:01:
                    e2:c0:0a:3f:a2:aa:fe:6d:29:7c:c4:7a:45:fa:24:
                    30:7b:23:f3:73:ae:8c:91:d6:6e:42:41:81:0f:63:
                    1c:33:13:9e:e3:69:bf:bb:b4:cc:c8:ba:8e:8a:27:
                    8b:74:07:d0:5f:56:22:d0:9e:38:63:a7:8c:da:e9:
                    46:fe:a0:63:e0:c2:1e:01:43:f0:b0:76:65:b2:19:
                    eb:9c:06:34:8e:b5:a1:16:2e:f6:82:15:d2:2c:b7:
                    a6:19:8a:8e:6e:48:2b:f6:1e:fb:dd:b1:f2:d8:2d:
                    be:2e:df:ed:7c:61:74:51:f3:6a:c5:48:cf:58:36:
                    cf:84:ae:b9:4e:86:85:74:74:a4:25:d3:69:f8:2f:
                    9c:9c:e7:a7:88:87:08:df:c0:bb:b2:e3:bd:50:46:
                    45:4b:17:f0:70:69:2a:fa:e8:10:e3:1a:f5:f3:f7:
                    7d:de:70:54:2b:4d:98:0f:30:cd:3d:24:5b:83:07:
                    b5:54:b9:4f:c3:ec:21:37:d8:f1:47:35:f4:fc:cd:
                    78:01:dc:90:d6:d4:2f:d7:7d:4f:29:56:97:bc:e6:
                    31:cb:a4:93:6b:69:89:d0:0e:68:cb:1c:d6:c9:a4:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A1:B5:2C:21:A7:CA:1B:67:65:1E:F8:91:1B:30:30:FD:CF:3C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:68:1e:a5:07:db:f5:b8:c2:bc:b8:5e:7f:fc:d4:aa:31:01:
         02:71:72:77:50:43:e5:0e:58:d9:64:cc:da:81:1b:ae:76:17:
         19:d5:66:d2:32:c9:3c:7f:82:24:fe:ea:45:79:0a:16:ba:27:
         f6:66:1a:f2:f2:78:84:ae:bc:72:a2:3f:5c:e3:e7:c4:3f:3a:
         17:0b:9c:bc:c5:b1:8b:70:80:1e:63:7f:46:ae:80:da:d9:7b:
         5a:f7:c0:b4:c4:53:71:00:0e:3b:7b:f8:94:71:b1:0b:76:f9:
         44:99:79:3b:0f:ac:3c:31:26:01:f4:d5:11:68:1f:16:4f:39:
         38:d4:49:56:ea:eb:c1:92:fa:f4:8b:7f:e1:dd:74:c6:bf:c6:
         51:9a:0b:c9:bb:e1:de:a7:83:2b:cd:77:e8:a7:28:71:a8:b1:
         52:d1:20:44:6e:35:3f:c7:c5:84:72:ef:c1:5b:b9:69:2f:c4:
         f7:fb:71:51:29:df:67:ab:de:7c:e7:ae:7c:72:a7:2c:60:fa:
         e2:a4:76:87:ca:1c:02:3a:7e:6d:7b:ba:80:e7:8c:d1:b9:49:
         f0:56:c9:7a:d9:09:64:d5:83:2a:4e:98:ec:b0:7f:3f:78:ca:
         4b:42:35:8a:c8:53:0b:02:74:72:86:98:c9:38:a9:5c:69:91:
         18:75:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:05 2024 by rpki-client on console-fra.rpki-client.org