Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
File:                     9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa (raw, json)
Hash identifier:          PY34DDNF+c3ig1vjwQ+MoOR3+ebc4Sl6vPeGbrZn/Qs=
Subject key identifier:   86:3D:BF:AA:5C:68:29:AC:C8:97:38:45:80:B5:F9:E4:B2:49:52:81
Certificate issuer:       /CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
Certificate serial:       010D0C9F432858456F1DB046C1287DA8F9C54CA0
Authority key identifier: 6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     396982
IP address blocks:        216.59.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b0:46:c1:28:7d:a8:f9:c5:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=09c70bbd-babb-48c5-8e8e-5bdc2cbfcaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:47:c7:8b:96:5c:46:18:c2:fb:44:f1:11:
                    82:e0:91:cf:78:41:86:02:9e:40:57:be:c8:cb:0c:
                    f4:6d:fb:bc:72:85:cc:89:3c:1d:b9:cf:5b:3c:26:
                    72:a5:00:4f:eb:60:d8:7d:92:64:19:aa:9f:01:67:
                    70:11:70:a4:f2:93:56:25:c8:e8:dc:a7:f0:90:4e:
                    31:8e:5f:7e:cc:11:13:fc:5a:4e:c7:d2:78:e9:2a:
                    15:d9:b1:d3:f5:e2:28:54:40:50:3e:bc:f9:67:99:
                    ea:bf:53:8f:ca:14:97:4e:ff:96:95:c7:aa:bf:ae:
                    61:ff:5f:f5:3d:3a:bb:be:6b:4c:0c:70:5b:d3:12:
                    5c:a3:47:c0:77:94:75:d3:bf:f9:0b:49:a0:4e:8e:
                    cf:79:75:d3:78:ee:83:90:1c:f2:51:29:00:5e:9f:
                    bb:c6:11:80:46:1d:8d:d8:d4:90:0a:d2:d4:2f:33:
                    08:ae:d9:b0:0e:dc:a1:9a:1e:ca:4f:e5:08:9f:7a:
                    71:72:67:a6:66:4d:01:bf:c5:78:b3:05:55:5f:d8:
                    a7:80:88:84:67:01:c8:02:69:55:5c:d5:df:a9:55:
                    44:ce:01:bb:06:d3:6d:1e:98:49:66:9b:1d:d0:4f:
                    7e:0e:37:f9:eb:f5:d1:f5:d7:77:c6:56:5c:82:24:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3D:BF:AA:5C:68:29:AC:C8:97:38:45:80:B5:F9:E4:B2:49:52:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:4a:24:6b:3a:f7:77:64:1c:35:a2:32:9d:d6:c0:90:40:
         f3:7a:c1:12:11:65:87:ee:a8:0b:19:38:e5:bb:84:67:67:6f:
         0c:13:73:94:f7:08:c5:bd:b8:6c:43:ac:4a:88:c2:86:77:d5:
         d8:6d:08:a3:4d:b7:1d:4d:2e:81:06:b9:ea:08:de:f3:08:c1:
         fe:38:ce:54:98:93:a0:32:db:61:e4:61:1d:e5:ce:d1:a6:48:
         55:f9:eb:c7:4d:d8:43:16:14:81:75:46:36:bd:04:5b:35:41:
         06:dc:87:bd:72:dc:54:56:a3:29:4f:78:99:1d:61:f8:64:09:
         3c:5a:1c:df:ef:79:ad:76:64:67:46:14:6c:1a:4f:0a:96:db:
         01:4d:1d:52:bc:05:6b:c4:a9:eb:7a:53:5a:2b:0c:3f:93:3b:
         0d:45:fa:b2:f1:1e:6a:4f:71:c0:48:8f:13:47:75:1e:e1:24:
         e3:9c:61:15:aa:13:4e:60:47:89:4f:b0:66:f8:a6:c6:ef:b4:
         fd:d0:e3:cb:65:4b:3e:3e:d4:6c:ae:60:b9:40:9d:d2:6f:dc:
         51:f9:c6:62:a8:2c:67:05:49:21:46:4f:70:fd:6c:5d:8e:2e:
         4b:57:c7:05:52:f6:8d:f1:09:3a:4a:70:42:b5:a6:98:52:e9:
         a2:31:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:49 2024 by rpki-client on console-fra.rpki-client.org