Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2201edd1-aba0-3e0d-9367-98cbf11b4bde.roa
File:                     2201edd1-aba0-3e0d-9367-98cbf11b4bde.roa (raw, json)
Hash identifier:          QblhENvPiuGQc5rhmP7Zz4FNGDQOIJ0IY8Wj7LPK9dw=
Subject key identifier:   C3:6B:C3:21:85:19:E1:53:1E:B6:18:01:F5:15:0A:E5:EA:67:C9:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89561C4660F75FE485DEA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2201edd1-aba0-3e0d-9367-98cbf11b4bde.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     394330
IP address blocks:        184.105.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:61:c4:66:0f:75:fe:48:5d:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=4dd1fdcf-9d65-49e6-b6c7-d09a8000b70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:80:6f:f0:ed:4a:e0:0d:24:00:ac:f9:f3:
                    85:31:e0:2f:94:e7:e6:b7:97:e8:ab:c6:5a:a1:50:
                    e8:80:56:54:a2:c2:ad:c0:6c:31:ec:53:4c:92:d0:
                    5e:fb:32:a0:7e:17:ad:ba:de:65:29:9c:6b:5c:6d:
                    3c:23:09:df:f7:24:5b:80:f8:f6:bf:de:cd:48:af:
                    22:0a:a5:00:9e:f9:d5:37:9b:4d:44:dc:91:a2:a0:
                    72:4d:2e:e2:93:bb:0b:48:e6:06:70:a4:99:76:52:
                    77:cd:41:a4:da:f7:fc:7e:66:39:0a:bc:0c:74:79:
                    d7:26:39:29:24:45:19:55:13:2b:bd:27:99:42:d8:
                    94:f6:63:46:b3:a1:f0:9f:d7:6f:50:f5:89:64:f3:
                    c1:9e:0f:1d:34:92:0e:ca:9c:24:a8:25:df:36:0c:
                    42:c9:c2:f9:fe:b4:44:9c:f8:81:23:34:10:84:81:
                    f0:f4:1e:37:bd:82:ec:64:97:17:b8:57:87:70:1a:
                    8b:f0:52:2e:c4:8a:c6:ed:12:e1:ae:a5:a8:9a:61:
                    38:9b:af:fc:98:ae:5c:c0:a0:41:12:fa:e6:a8:06:
                    61:9f:03:73:2e:a7:40:0e:e3:7a:79:31:8c:90:6d:
                    47:a1:b1:3d:40:9a:3d:20:42:e0:7c:42:bd:28:59:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:C3:21:85:19:E1:53:1E:B6:18:01:F5:15:0A:E5:EA:67:C9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2201edd1-aba0-3e0d-9367-98cbf11b4bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:9e:9d:99:96:3f:67:00:81:38:4d:0e:0f:33:d5:5f:9c:
         81:d8:15:af:00:0c:58:78:27:61:aa:1b:2c:35:45:58:3a:f2:
         7a:b8:50:3c:28:09:53:ba:fe:f6:1a:84:94:30:9c:b3:ad:3a:
         63:b3:8f:8a:43:1e:b4:01:37:fe:7b:25:37:b2:64:f4:e8:36:
         27:31:13:a7:c2:93:5d:dc:4c:8b:2d:91:cd:ae:a8:40:ba:d2:
         98:51:1e:29:0a:31:73:d4:0d:20:87:96:45:cf:8d:4a:1f:c7:
         f3:df:59:3f:c4:be:bc:da:81:28:df:c6:eb:0d:76:41:a8:aa:
         91:a9:db:53:ed:d7:f0:36:97:6f:55:c7:6a:1d:b2:5a:47:d8:
         b1:13:d9:ab:8d:bd:83:e7:8b:be:30:df:5f:ec:23:66:32:a3:
         76:cb:90:76:c9:f7:9f:3c:13:41:7e:de:6c:de:79:d3:5d:4c:
         2c:5d:56:3b:c6:a4:3a:1d:18:6f:be:37:4a:73:dd:1a:a5:e0:
         da:32:84:1b:14:91:11:06:95:98:66:31:a8:cd:da:39:30:ca:
         c2:20:3c:dd:dd:bf:ce:19:56:bf:28:22:4d:c0:a2:09:e0:f1:
         c2:c3:69:4d:1f:21:9d:3a:01:6d:81:f1:24:ae:12:de:6f:a0:
         93:de:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:26 2024 by rpki-client on console-fra.rpki-client.org