Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
File:                     041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa (raw, json)
Hash identifier:          0tSJ2oh+02MqT/v7gAT1qycUAGFJJPY3NHK1zPtrybM=
Subject key identifier:   46:9D:C2:55:BA:63:38:E2:3B:6A:FD:3C:AE:DA:CB:6A:E2:2B:42:3C
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584571E86F17C7C85E31A5866980
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        192.184.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:6f:17:c7:c8:5e:31:a5:86:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=41bab619-83ee-4431-a4f0-62e5e72f5c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:ea:de:2b:12:f9:2d:d4:f8:6a:37:72:70:
                    b7:4a:cf:8d:51:24:3c:39:1a:fb:7b:5a:86:39:df:
                    e6:e1:a7:84:38:2f:21:cb:2a:59:ea:3e:21:3d:0c:
                    0e:93:49:95:03:0b:6e:85:60:2a:4b:8d:c5:7c:4c:
                    dd:2d:26:fe:e3:c0:57:45:0e:c1:a9:d1:58:a5:4a:
                    17:a2:91:c2:8f:1f:33:87:ec:7d:04:c1:6a:a2:9e:
                    83:54:36:62:37:67:34:7d:f0:37:79:0a:1a:a0:88:
                    dd:bf:ae:24:10:5d:34:c8:24:fc:1d:e7:1e:04:41:
                    85:af:b7:b8:7a:73:62:53:5b:58:90:f9:89:9e:9d:
                    b9:5c:9f:5f:db:71:a9:ea:86:91:6b:d6:0b:40:9d:
                    3e:0f:5a:9c:42:35:27:7b:fe:83:5b:ba:b9:86:cc:
                    4d:51:f7:34:2c:cb:f3:f3:eb:b3:82:55:86:66:03:
                    71:12:e6:e4:d6:07:91:46:9b:3c:a7:e8:31:70:7f:
                    b2:2b:bf:46:09:ce:7f:b9:69:7c:44:91:ee:70:8d:
                    83:0e:28:bc:13:82:f3:f1:6c:15:4a:23:b3:75:17:
                    a7:75:d4:6a:e5:9a:cd:4a:6c:23:59:8f:a6:ba:57:
                    d0:1f:92:c8:f5:1b:d9:1f:9c:b6:ff:ea:c8:0e:75:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:C2:55:BA:63:38:E2:3B:6A:FD:3C:AE:DA:CB:6A:E2:2B:42:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:63:84:15:d0:0e:0c:dd:51:9f:83:84:12:af:a4:17:b2:
         44:cd:49:60:ca:50:f0:d3:0f:fb:e9:c8:05:98:01:90:ab:f1:
         b0:03:0c:a3:b6:d8:57:57:1c:1a:b1:25:f2:31:86:b6:d7:b3:
         28:c4:2e:0b:3a:b9:fe:d2:0c:e2:86:33:fb:be:4d:72:2c:f6:
         11:ec:c8:f4:20:d1:f8:8b:8f:db:98:3a:3e:9d:cb:ad:2a:a5:
         25:4e:22:cb:b3:fd:6a:28:20:02:ca:1e:51:c8:b7:ed:e4:cf:
         61:d8:da:db:be:e4:70:74:b2:1f:d2:b1:c9:fa:b9:22:b3:47:
         b6:b4:1e:fa:9e:0a:c7:f6:55:98:74:b5:83:0b:b8:fe:a7:54:
         f0:99:48:5f:67:c6:92:96:e5:c2:4f:0f:2b:5c:03:6e:f6:93:
         46:d6:bd:36:66:80:59:3f:3b:ba:72:f6:e1:dd:e7:98:a0:00:
         dc:28:9c:c7:00:ed:ce:91:62:8d:7b:b9:1e:d4:b4:63:12:96:
         a4:75:21:7e:09:6f:68:d6:4f:65:42:44:0f:bc:27:81:01:75:
         90:53:6f:4f:64:e5:93:98:99:08:25:3c:53:68:10:98:15:89:
         6b:09:cc:fc:d3:8f:05:ba:24:71:70:73:5a:59:fb:bf:f3:57:
         74:d3:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:28:32 2024 by rpki-client on console-fra.rpki-client.org