Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa
File:                     5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json)
Hash identifier:          4j5x/TV2FweyOUhkRqOEVElsV7U6G7ipARSQLtn1H7Y=
Subject key identifier:   AB:53:E8:97:AC:96:04:38:A3:B6:4A:5D:24:65:65:21:C2:C2:1E:1D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858454F02C1D678FEF244DB8DC5E0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     31898
IP address blocks:        170.114.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c1:d6:78:fe:f2:44:db:8d:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=5b3be76f-127c-4f87-98c8-698ab739367f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:f7:3f:73:49:0a:75:ea:9f:d9:2c:aa:36:
                    4e:e5:fb:26:4f:6d:79:d6:1c:c2:17:9e:b0:c9:06:
                    28:f2:8f:db:14:5d:0a:8a:90:8f:d4:90:db:50:76:
                    4e:bb:83:af:44:93:26:f4:15:d6:f0:bf:50:ad:6b:
                    cd:74:3c:72:ab:64:04:3e:a0:4a:8c:a8:18:65:7a:
                    e8:16:15:c3:d6:e2:f6:c8:1b:8c:31:69:31:63:2a:
                    c0:94:38:55:d3:df:9e:86:35:8c:36:1e:d9:14:b3:
                    d9:d3:a1:b4:38:4b:12:de:d4:e7:da:b3:46:ff:9b:
                    a0:2d:ad:37:c2:e8:fc:72:48:5f:83:9e:52:aa:aa:
                    74:19:eb:ab:eb:92:58:bd:5c:9c:9e:3d:92:81:86:
                    f8:39:01:40:27:de:ca:c7:23:d1:58:b8:d7:14:ee:
                    d2:9b:4b:f3:64:bc:38:da:86:ad:8b:61:9f:7e:1a:
                    e8:ae:50:8b:48:15:79:ba:66:55:16:96:3a:b4:5a:
                    78:0f:53:1c:b5:1a:71:f9:f3:c0:01:dd:a3:42:bc:
                    12:e6:39:39:cb:02:49:18:eb:bb:f2:63:f2:2d:15:
                    9b:4b:70:ce:d9:6d:32:eb:7b:3b:30:7e:3e:cd:67:
                    52:fb:0c:80:18:84:2f:16:93:ab:d1:68:fa:9d:2e:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:E8:97:AC:96:04:38:A3:B6:4A:5D:24:65:65:21:C2:C2:1E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:75:7c:c9:4d:31:9d:42:f5:03:75:da:9e:8f:42:a8:b6:fa:
         62:57:96:7f:bb:d0:50:dc:63:76:c3:aa:88:65:a1:01:05:2d:
         37:e0:1d:63:c4:be:e8:85:3e:dc:f9:36:bd:52:97:45:7b:ba:
         13:7b:54:5f:0e:24:52:73:3f:b5:2e:51:9d:6b:a7:fe:51:63:
         ac:51:85:55:e4:5a:50:77:04:86:da:fc:9d:d1:af:c4:31:3d:
         fa:be:68:fe:b1:19:1e:91:d2:b8:ee:7d:e4:0a:54:18:f6:f4:
         33:e8:f0:a2:35:20:29:27:16:a6:a0:bc:53:38:1c:39:da:f9:
         09:88:39:ab:a3:b7:95:f2:cf:09:e4:aa:77:5e:45:18:2b:da:
         09:9e:fb:a2:a4:26:8f:3c:61:d0:4a:89:d2:63:dc:3c:ef:15:
         d6:31:08:7c:c1:81:6f:e9:54:cd:bb:61:1f:08:1b:cb:ff:dc:
         fd:92:1e:6b:fa:85:b6:3f:aa:70:a1:18:75:9e:f7:22:8c:cf:
         7e:a3:13:f8:55:ac:28:ca:ed:ab:c0:cd:cc:7e:b3:24:0f:eb:
         ea:bb:21:d8:92:80:37:d5:c4:48:52:81:16:71:29:ad:e3:39:
         72:d2:03:d0:ca:de:95:91:60:a0:98:5d:a5:72:53:e0:1d:3e:
         c1:1e:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:10 2024 by rpki-client on console-ams.rpki-client.org