Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/6b9d99f4-b915-3493-8a5f-a2c8c03919b8.roa
File:                     6b9d99f4-b915-3493-8a5f-a2c8c03919b8.roa (raw, json)
Hash identifier:          mJ3lDFg9tGSx49AYNFKszfODOJHJYByYvvQIgYmIhMc=
Subject key identifier:   A2:C5:49:C1:F4:70:13:41:01:6C:27:DC:35:6F:73:0A:EF:E2:5B:1F
Certificate issuer:       /CN=ad2a8414-575e-4d7a-8c69-a1fd4f31ba30
Certificate serial:       010D0C9F43285845CE08F062CEE1E35C05129CE8
Authority key identifier: B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/6b9d99f4-b915-3493-8a5f-a2c8c03919b8.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        199.180.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f0:62:ce:e1:e3:5c:05:12:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2a8414-575e-4d7a-8c69-a1fd4f31ba30
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=9ce5ef96-59c6-4d78-9284-93077455b3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:19:27:f9:89:50:2d:b9:9f:ff:61:29:83:
                    26:23:57:f1:7a:ea:a9:35:27:9c:28:eb:96:a8:00:
                    7d:77:2c:4b:15:9c:b1:db:27:ee:0e:ce:e4:a8:7c:
                    88:15:6a:1d:d9:de:f4:0d:26:be:2e:9b:12:8d:bd:
                    c3:20:c9:49:01:8e:9b:09:74:40:99:31:35:5c:00:
                    a1:69:f7:e0:c3:55:f1:c8:ae:c1:39:b6:e0:72:78:
                    3e:4d:cb:95:3b:d6:8d:18:4f:10:5e:75:3c:70:71:
                    e0:9b:09:03:a1:0a:f1:c5:de:e7:a8:8d:40:2c:f4:
                    de:d7:f2:d1:22:d5:db:ad:5f:93:84:80:0f:2d:51:
                    ed:2a:96:65:c8:5a:c6:52:ab:66:5e:3e:f0:d3:7c:
                    d8:13:a8:38:c0:3d:64:3b:6b:7f:95:63:46:b1:58:
                    1d:5a:83:aa:c9:03:4e:d2:74:25:13:c6:97:53:a0:
                    24:b5:34:00:90:42:7a:70:b9:90:c0:a6:33:30:d5:
                    c0:56:da:81:59:2d:20:e9:c9:66:b9:37:34:e9:8f:
                    74:db:7a:c2:fa:3f:91:be:b4:fc:84:a7:fc:0a:09:
                    47:9e:47:c1:19:26:28:5b:a2:23:45:7b:3f:8f:9a:
                    84:be:a7:9e:26:6d:79:d0:a7:d2:fb:91:71:17:98:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:49:C1:F4:70:13:41:01:6C:27:DC:35:6F:73:0A:EF:E2:5B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/6b9d99f4-b915-3493-8a5f-a2c8c03919b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.crl

            X509v3 Authority Key Identifier:
                keyid:B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:69:5b:42:f6:af:61:ba:d9:9e:1f:10:f7:6c:73:ac:60:
         92:56:1b:d6:a9:87:9a:9b:ec:d1:c8:10:cc:11:f2:d0:0e:35:
         dc:8f:e5:10:d6:db:02:8c:c4:6e:e9:7b:58:0e:fb:ca:c7:24:
         66:d4:35:95:98:82:08:5c:29:d5:b7:c7:9b:57:df:f4:45:02:
         ff:d5:2c:93:7d:46:02:24:14:ef:96:48:18:db:40:fa:d8:9a:
         4e:82:2a:83:73:77:95:c4:c6:96:c8:c5:63:51:aa:b2:35:7c:
         02:ba:de:ce:1a:0f:af:fd:cf:93:37:94:5f:b7:04:a4:82:ef:
         ea:5d:b8:d2:15:b3:f4:36:45:1a:9c:46:8b:64:ea:bb:61:2e:
         13:87:56:bd:89:a2:46:8b:7a:84:63:d3:ff:bb:a3:3d:47:c9:
         7a:9b:4c:ca:3e:6f:64:34:1b:04:b4:ec:67:75:35:70:b2:56:
         61:28:90:dc:f9:36:4b:75:8f:b4:3b:c0:dd:e9:c7:96:2f:81:
         64:b6:f3:dd:22:6e:24:f6:89:0e:1e:cf:26:0b:7f:1e:fc:13:
         5f:0b:12:3c:7b:3e:bd:85:a5:2a:81:c9:76:7e:5a:f4:5e:72:
         74:29:f6:49:91:54:d9:37:41:c1:52:92:63:30:a8:44:91:8d:
         42:15:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:39 2024 by rpki-client on console-fra.rpki-client.org