Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/692143a7-8fe3-322a-b703-b5726de716b7.roa
File:                     692143a7-8fe3-322a-b703-b5726de716b7.roa (raw, json)
Hash identifier:          yKLA+YzpwuGEYpHVoyIVMBB1Vegu6/ndXBlT/c1OneQ=
Subject key identifier:   74:24:D6:B8:A0:42:CE:54:9D:CB:81:A5:F9:7B:B5:B7:53:D3:73:34
Certificate issuer:       /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial:       010D0C9F43285845D7CE400559C32BEF352C4620
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/692143a7-8fe3-322a-b703-b5726de716b7.roa
Signing time:             Sun 12 May 2024 01:00:25 +0000
ROA not before:           Sun 12 May 2024 01:00:25 +0000
ROA not after:            Sat 10 Aug 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        209.240.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d7:ce:40:05:59:c3:2b:ef:35:2c:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
        Validity
            Not Before: May 12 01:00:25 2024 GMT
            Not After : Aug 10 01:00:25 2024 GMT
        Subject: CN=17eb664b-3008-4c78-9079-8fc54600255c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:1f:5b:3b:4f:9b:ac:52:63:07:5f:a5:3c:
                    ad:8e:90:55:5c:30:9c:17:f5:5b:af:59:8d:d2:d9:
                    e0:f1:49:02:ca:96:f0:5f:6d:a6:b9:8d:3e:e2:4a:
                    4d:56:6b:11:68:c9:23:79:0a:b3:b7:6a:8e:82:61:
                    c8:fa:7b:8f:72:d3:71:06:09:ac:5a:7e:ba:73:54:
                    73:0f:bc:46:77:cf:af:8d:4e:15:67:0b:88:69:6f:
                    0e:f7:08:4e:51:b8:11:00:5b:58:d8:60:95:69:30:
                    8e:b3:b9:2e:19:11:56:d9:92:75:51:83:5b:b5:aa:
                    4a:1d:66:28:bb:37:e0:be:3e:e9:7b:ea:23:67:70:
                    fe:c2:99:5c:f9:e9:2a:77:5a:29:2a:3f:10:a1:40:
                    2a:9e:62:c4:ef:b6:e4:22:a6:87:02:12:a1:0d:b3:
                    bd:1f:aa:1d:c0:2c:99:31:5b:1c:a4:69:28:97:23:
                    ab:cd:c2:f9:52:a2:66:66:c6:8c:f8:f5:84:5a:8f:
                    f6:c7:57:44:64:38:e8:16:20:0b:14:e6:8d:80:66:
                    e5:8c:cd:f9:de:d0:4e:84:f4:16:37:2e:bc:a0:78:
                    d5:d3:3b:89:ea:a1:b5:f8:45:55:e0:54:c0:50:44:
                    11:d1:e0:33:2a:96:e7:c0:27:46:11:f0:1e:6d:04:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:D6:B8:A0:42:CE:54:9D:CB:81:A5:F9:7B:B5:B7:53:D3:73:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/692143a7-8fe3-322a-b703-b5726de716b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl

            X509v3 Authority Key Identifier:
                keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:8c:76:34:3c:94:b6:e2:e3:4d:fe:21:1b:ae:8e:99:fc:
         e7:ba:05:35:4b:1f:db:dd:71:c2:4a:79:c2:fd:7f:3c:ff:6d:
         7f:4d:13:00:f5:32:d0:04:46:18:aa:26:24:ec:41:e5:14:88:
         58:86:e9:7b:f4:5c:12:cf:1b:52:ae:e4:84:c9:31:34:69:f4:
         37:9c:61:60:65:8f:f8:f5:59:91:ff:08:88:38:4b:b2:a9:02:
         fc:28:5e:de:ab:90:b4:c0:01:58:37:ef:98:0a:03:19:03:97:
         c5:22:e1:34:fb:87:e5:36:6c:33:57:e3:a3:4c:d7:32:ab:00:
         6f:7a:f8:f4:1e:7d:d6:64:60:7b:78:55:3e:81:28:d6:68:79:
         64:95:2f:b4:d6:e4:6f:67:93:ac:9b:ff:29:9d:43:ab:5d:c7:
         a9:7d:08:89:e5:5f:f3:51:2b:c4:ec:db:a6:e4:f9:5c:92:b0:
         68:0f:ab:64:45:cf:00:d3:13:5c:17:9c:70:9d:b6:3e:5d:15:
         67:24:78:1b:4c:5b:ff:74:c4:0a:4b:ea:82:7d:1e:84:b0:89:
         a7:0a:c1:4b:c0:d7:09:70:10:eb:d5:1d:28:50:62:29:2f:b6:
         99:be:36:10:86:e7:6c:8e:94:76:0f:2c:2c:38:96:84:c6:70:
         24:d6:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org