Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4f5e73db-7853-3588-a8e1-d3478800edcd.roa
File:                     4f5e73db-7853-3588-a8e1-d3478800edcd.roa (raw, json)
Hash identifier:          yq39+b0dU07pSwsgz2TLH07EnHxpfK56VNXvPU9wo/M=
Subject key identifier:   2F:81:DD:A8:E1:C3:57:C4:67:83:45:5A:61:4C:4E:CF:A8:D4:FE:F8
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F432858456C5321BA6E12D25EA005BDC0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4f5e73db-7853-3588-a8e1-d3478800edcd.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     54203
IP address blocks:        69.16.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:21:ba:6e:12:d2:5e:a0:05:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=127e972f-8898-49ea-8afd-a60ebbedf317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:21:83:da:6e:91:37:a3:a9:5d:f4:1f:61:
                    0e:ed:a2:73:b1:50:49:12:9b:94:2d:4f:2c:50:0b:
                    ab:28:b9:12:4c:f7:94:15:be:44:8a:86:aa:1f:7d:
                    8d:2f:5b:97:9b:94:7e:77:37:c9:bf:f7:30:61:8f:
                    88:1e:75:29:87:d0:18:0f:26:ba:a4:5a:5c:b4:60:
                    e0:03:31:cb:f8:9d:59:aa:02:48:3a:b5:60:91:17:
                    55:e5:c0:96:82:03:cb:38:53:13:f8:57:04:6a:45:
                    2e:e2:8f:ce:ea:27:a8:6c:9a:e4:ed:cc:a6:2c:bf:
                    7e:65:7c:46:57:07:2c:2c:14:64:b8:61:5c:28:11:
                    51:ed:11:1e:c9:74:55:c0:7b:d1:b5:9f:ad:aa:1d:
                    e2:f1:01:36:c2:33:d1:e1:40:a7:92:1f:43:f6:0b:
                    d3:e2:54:6b:ed:be:4f:46:22:e0:a4:db:2e:d6:37:
                    66:47:c0:72:2b:df:5d:2f:6d:d3:56:a8:1f:46:ba:
                    5d:c4:76:02:d5:85:1b:92:b9:cd:07:24:e8:39:43:
                    4d:ac:58:ac:8a:99:0d:62:8f:b9:0b:3f:e7:00:dc:
                    57:25:36:00:f9:70:eb:6c:ba:e4:a7:80:63:01:ce:
                    d7:e1:c7:51:0a:9d:ac:56:9b:15:a9:51:23:e3:59:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:DD:A8:E1:C3:57:C4:67:83:45:5A:61:4C:4E:CF:A8:D4:FE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4f5e73db-7853-3588-a8e1-d3478800edcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:dc:75:6c:52:3b:7d:18:0d:88:0a:e7:0e:8a:a9:1a:02:e0:
         fd:07:3f:e8:59:28:18:97:31:de:d6:b1:a7:51:99:c3:df:75:
         01:11:f7:17:95:8b:35:de:3c:ef:5e:21:7c:f6:fa:fb:c1:63:
         8f:f8:28:b4:74:63:50:30:34:a9:37:b9:40:ec:05:a7:1a:c0:
         e6:9d:a1:47:e1:78:8c:79:eb:75:d6:61:33:b1:57:9a:6a:67:
         e5:05:c4:1f:b8:6c:aa:1e:5c:90:29:8a:2b:5b:2f:8c:11:58:
         6e:62:88:ea:7e:f2:0c:3f:66:27:5b:72:4d:69:0f:09:4c:78:
         29:b6:07:cb:9a:7c:21:46:c7:68:53:c1:d4:0a:cd:e4:6c:ec:
         2c:d8:0a:86:cc:54:0c:a4:4e:19:a5:c5:ff:ad:4a:ee:5c:70:
         ae:05:6b:e3:0f:c8:6b:20:82:90:95:01:fe:5a:5e:41:b8:a0:
         fc:37:03:d4:f4:55:0f:f5:16:3c:dd:62:3c:c9:72:31:61:63:
         4f:a4:e7:8a:36:fe:d9:b8:c4:5b:b5:c8:90:84:6d:a9:3c:3b:
         da:53:38:3b:f2:3b:7b:2c:36:c0:e2:c0:26:25:3f:cd:a2:5e:
         01:7d:94:44:3d:73:4e:99:37:0b:06:75:97:81:48:e8:09:90:
         d8:cc:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:50:08 2024 by rpki-client on console-fra.rpki-client.org