Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa
File:                     72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json)
Hash identifier:          RHGdriOxPh+96+f64Q1UG+Fp7zRiaDxhij8f1pZycXE=
Subject key identifier:   A3:4E:51:5B:45:E5:04:B9:09:58:96:88:CB:0F:BA:34:E4:5C:FF:10
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858454A725B7FB1BC5998D524E280
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa
Signing time:             Fri 22 Mar 2024 09:46:19 +0000
ROA not before:           Fri 22 Mar 2024 09:46:19 +0000
ROA not after:            Thu 20 Jun 2024 09:46:19 +0000
asID:                     31898
IP address blocks:        199.36.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:72:5b:7f:b1:bc:59:98:d5:24:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 22 09:46:19 2024 GMT
            Not After : Jun 20 09:46:19 2024 GMT
        Subject: CN=2bea4545-82e4-4a9b-af4d-2f30740089a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:c8:43:a8:72:d6:9f:b6:be:04:8a:a7:e2:
                    70:51:50:87:f4:19:31:bc:fc:ba:3e:32:1f:55:3f:
                    f2:cb:61:c8:e4:fe:fe:69:d9:fe:65:e0:1d:a5:19:
                    f0:1f:17:a3:99:1b:e6:c0:23:34:00:44:df:c6:51:
                    b7:44:a7:32:62:5c:06:37:df:6f:a7:04:8a:28:de:
                    71:5a:89:e9:54:2e:26:7b:64:5a:d1:97:a8:4c:9d:
                    e4:48:28:63:e6:99:31:f8:35:7e:dd:cf:c8:2e:5f:
                    54:63:e7:3a:85:bf:74:05:b7:3e:fb:76:f8:d5:d1:
                    0d:b8:cf:f2:b8:36:9d:bf:fc:8f:69:db:83:fc:20:
                    e2:ff:44:52:cc:63:a4:13:9a:dc:1e:32:66:1f:fd:
                    5b:1c:c2:e5:72:bd:80:e2:28:0f:62:dc:94:a9:3c:
                    de:10:45:75:e6:fe:52:a3:a8:85:06:f7:e8:0c:f1:
                    8c:26:b1:b7:b3:9d:32:fc:6e:f3:44:4d:64:64:cf:
                    29:83:7d:84:11:f6:73:ef:8f:56:d1:93:56:95:57:
                    5e:9a:1e:16:12:12:e9:dd:9e:fd:1a:cd:82:22:d6:
                    03:38:b9:f9:30:fd:37:94:de:8c:21:6e:30:ad:97:
                    b5:4b:a6:cc:e5:73:a9:ae:0e:ae:8b:ee:40:47:76:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4E:51:5B:45:E5:04:B9:09:58:96:88:CB:0F:BA:34:E4:5C:FF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:e3:cc:ae:5e:2c:a0:b3:1d:d0:7c:60:5d:ad:2e:3b:ad:
         04:ca:0b:1a:36:aa:8a:b6:52:1e:d0:18:5b:9d:58:ee:21:9e:
         4a:61:ed:f6:0d:5d:b5:6d:ca:2c:bc:72:99:56:c1:17:5a:b8:
         52:14:33:fa:10:84:ae:4f:2d:94:f5:9c:e8:2b:78:3e:6e:89:
         20:27:96:da:d6:59:ce:be:b7:95:02:c9:c4:be:50:bf:f3:98:
         34:5f:53:1c:a9:e5:8d:d0:7c:c8:4f:2a:9d:aa:f2:5a:f1:d1:
         58:1b:37:5b:c1:ed:dc:eb:2d:59:7d:7d:95:3d:92:39:4d:6f:
         45:cc:e4:5b:92:7a:e2:37:e2:ca:ca:54:7f:19:f2:f1:ab:e9:
         e4:88:86:a9:59:3e:21:64:4f:78:d7:70:41:de:df:ec:67:dd:
         a3:e4:e5:a5:dd:35:c6:75:be:59:7a:7b:1f:9b:23:39:b6:c5:
         46:74:e1:99:48:a8:a8:b5:d9:26:a8:8d:9d:44:a1:93:0f:63:
         1c:c2:60:93:d5:86:2f:41:58:a5:03:41:84:bc:94:45:91:cc:
         d2:56:90:e7:0e:95:7e:f9:36:be:3a:bd:35:03:98:85:2e:88:
         c7:90:f2:c0:d1:b2:c1:5b:eb:1b:3b:b3:b2:b7:e9:29:56:f5:
         48:d1:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:52 2024 by rpki-client on console-fra.rpki-client.org