Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
File:                     e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa (raw, json)
Hash identifier:          uLss3A5gwRPtNd9lAwxs71ucIP7RkpOt7veJ/H17BVk=
Subject key identifier:   1A:1F:2E:49:7A:80:AA:E9:CB:36:71:57:F2:05:4F:78:ED:62:38:63
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F43285845C01390DCD6976670BD1F7280
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        209.127.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:90:dc:d6:97:66:70:bd:1f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=cd26fbaa-7998-4c55-9e8b-bbe7594bac52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:c5:a8:0d:ad:7c:bc:f4:98:bb:85:cf:60:
                    fc:40:76:86:ca:26:17:e9:f0:fa:e4:ae:b2:13:d5:
                    f7:e2:13:1f:49:fa:d3:4c:72:76:13:89:f7:63:02:
                    d2:cd:ee:cf:64:96:5f:cb:60:84:2a:20:ba:aa:5d:
                    99:41:09:6a:85:5c:9b:06:6c:49:54:0a:2b:98:cf:
                    da:0f:73:53:f7:ff:6c:b0:a3:b6:39:c5:6b:db:5b:
                    1e:72:69:11:6b:fa:d3:c4:86:21:d3:6b:41:a5:d5:
                    d9:74:95:d9:e8:22:c3:4c:de:03:d3:7d:f9:c9:35:
                    6b:dc:98:28:6d:09:0a:26:82:d6:ff:dc:22:d8:1e:
                    ff:45:a1:a6:8b:60:19:c5:97:22:bb:74:18:66:eb:
                    4c:0b:ea:2c:f6:c4:1b:3d:d0:81:5b:2f:ee:11:60:
                    b4:f3:41:f1:5a:22:bc:7f:76:5e:2f:6c:b7:11:c7:
                    cd:58:b8:f4:fb:43:13:1f:f3:e2:c5:82:9d:13:e1:
                    19:b7:b9:cb:e5:de:4f:fa:8f:8f:74:ac:88:1a:df:
                    be:43:09:f5:76:43:76:2c:02:de:cb:e6:c1:4f:ab:
                    85:41:7b:b3:1e:49:5f:31:82:c1:81:a2:7d:1d:10:
                    04:c7:ce:eb:7c:86:a2:cd:ee:a8:8b:27:71:23:c7:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:2E:49:7A:80:AA:E9:CB:36:71:57:F2:05:4F:78:ED:62:38:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:53:eb:76:c5:df:62:13:e5:18:7b:a4:a9:98:49:45:01:
         72:da:b7:e8:3c:6b:5f:2b:8d:53:21:ed:10:41:3e:44:64:de:
         21:ae:ee:90:4c:b2:b3:2d:c2:73:7f:60:50:ca:ac:e9:03:22:
         06:9a:4a:ce:18:09:14:0f:d7:7a:d1:e0:92:6d:95:40:af:20:
         19:d7:42:21:b4:7c:02:1e:21:cb:bb:33:aa:da:88:ea:9c:b1:
         fe:10:bc:f3:45:d9:e9:17:a2:94:c2:83:28:33:04:dd:d4:5c:
         78:07:de:6c:9f:11:e9:43:b7:64:bd:15:41:4c:14:aa:a2:74:
         bf:4f:07:0c:bd:79:d0:3f:fa:6b:da:16:e2:49:67:2a:56:d3:
         fc:18:a5:a5:ad:e0:c4:3b:f5:73:ec:1e:21:1f:e4:c2:a7:cb:
         94:49:db:75:2b:8b:a8:86:7c:02:05:e4:92:e1:64:0c:b9:2d:
         07:23:ca:38:fd:e0:42:d9:9e:96:81:19:ef:e0:74:82:c1:0c:
         b8:1d:5f:69:32:d6:07:bb:81:5d:48:97:1e:5e:e3:ef:dc:74:
         ad:e7:a5:b0:51:35:fc:bb:31:eb:1a:9e:9d:5f:3f:ee:e3:c7:
         75:b5:2b:78:98:da:52:46:a3:88:ec:65:1b:36:74:bc:e1:3f:
         c6:27:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:30 2024 by rpki-client on console-fra.rpki-client.org