Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c3eeee8-db48-3d6f-a8e1-d3199b12b60f.roa
File:                     4c3eeee8-db48-3d6f-a8e1-d3199b12b60f.roa (raw, json)
Hash identifier:          bRoP7zwxe7dFUahXZWxmBu76I6AnvJTpsSgfTxK8ZHE=
Subject key identifier:   EE:8D:54:7F:0C:FB:EF:D0:BF:5F:99:67:39:BD:4B:C0:9B:66:01:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B373153F7C76C158BB680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c3eeee8-db48-3d6f-a8e1-d3199b12b60f.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        24.3.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:37:31:53:f7:c7:6c:15:8b:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=dabdd28f-7c9e-4c6f-98a0-7844ffad8af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:ea:f6:37:c2:d8:b7:d6:a4:e2:a3:93:1a:
                    e4:ed:4c:ac:7a:92:af:cb:c1:89:1e:3f:72:09:4e:
                    50:3c:3c:27:90:76:4e:e0:1c:ba:bf:74:a1:4b:9d:
                    b7:8b:fa:70:65:9a:e2:fe:33:de:f0:28:2b:f3:47:
                    1d:fb:bf:52:75:71:98:90:43:33:51:b1:6c:67:ee:
                    ba:e7:d2:f7:0a:2d:5e:35:16:49:00:15:f0:ee:b8:
                    32:51:85:00:3a:05:76:e7:9e:78:2e:a0:44:3e:d0:
                    e7:f3:af:eb:12:47:fa:ff:cf:a3:49:99:fc:c7:88:
                    5c:52:c7:77:fe:b0:a3:ed:af:83:e3:d0:d3:32:65:
                    7b:a0:ca:c5:5e:bb:b3:8d:0c:1b:28:49:13:f0:28:
                    dc:e3:c3:86:42:9c:70:6f:04:c5:c9:9c:ac:0b:fd:
                    3b:cf:93:55:d8:69:c2:d1:1d:4d:aa:00:c3:a5:a7:
                    5b:af:d0:0f:14:9b:6e:55:c5:47:ce:38:56:27:dc:
                    fb:0d:12:eb:33:6f:e5:bc:f0:7d:d9:9c:d4:57:ec:
                    cb:c1:12:86:76:d5:db:7b:3d:9e:84:34:43:14:ac:
                    e5:76:85:80:26:df:66:60:c7:de:32:bb:ac:2b:4a:
                    51:fb:ff:d1:dc:68:dd:70:21:55:53:95:20:d9:68:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:54:7F:0C:FB:EF:D0:BF:5F:99:67:39:BD:4B:C0:9B:66:01:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c3eeee8-db48-3d6f-a8e1-d3199b12b60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.3.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:0d:a7:1a:6b:ce:f1:12:ce:ea:c9:d3:c9:f8:71:03:7f:
         56:fa:50:ef:92:c2:9b:c5:3a:59:76:2d:25:d1:09:33:c7:2a:
         63:b6:23:16:04:a4:71:a1:55:bc:c7:1f:0e:16:9d:36:88:6f:
         57:ae:27:e9:6b:a5:96:ff:98:ea:d6:8a:42:22:38:fb:ff:55:
         bf:34:24:8c:23:09:e1:be:b9:03:2d:4f:b6:07:fe:c2:7a:95:
         8e:31:24:0d:c6:28:e0:61:fb:01:95:ad:7b:4e:4b:80:a7:e5:
         8d:a3:bd:9d:29:b6:85:c3:a7:86:e8:4f:1f:d0:ee:34:b4:b5:
         f2:aa:b6:9b:47:95:ea:80:14:4c:d0:e2:7c:e7:85:24:ee:34:
         53:d4:b4:cf:ff:8f:1d:ad:1f:e8:ec:b6:67:ff:84:a4:6e:f7:
         77:97:e7:59:c0:d4:04:43:de:f3:0b:af:f2:bf:4d:7b:4f:53:
         db:b1:0f:89:ac:a5:5a:6e:e8:88:44:9d:79:7f:14:cd:ba:07:
         7b:1b:c1:49:cc:04:99:04:0c:a2:cb:b3:52:64:60:81:80:b9:
         61:22:fb:d9:a9:53:4a:99:51:af:fb:30:75:4c:1a:75:ea:33:
         6a:59:75:92:74:fa:bc:47:93:4c:bf:0f:28:4b:d3:ff:a3:30:
         9c:b9:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:59:13 2024 by rpki-client on console-ams.rpki-client.org