Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa
File:                     cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa (raw, json)
Hash identifier:          B6Ya0a2C7o/p152Q+elil09RSY1QIZw2LrXiHZ6za2Y=
Subject key identifier:   77:A1:45:7D:D0:56:A7:CF:21:77:F1:D4:93:60:EE:4D:37:B4:C4:B7
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285845DEC911411602CB9EFD6C2B40
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     11537
IP address blocks:        163.253.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:11:41:16:02:cb:9e:fd:6c:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=e3ecf13d-26d8-4aef-9525-eef428c2ac6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:0e:a4:24:50:b3:1f:30:f5:ae:b0:27:86:
                    96:5a:09:45:40:80:2c:4a:4d:98:12:eb:1b:42:ea:
                    12:58:5c:1d:06:bc:e1:35:00:99:bc:e2:64:58:17:
                    e5:43:45:4b:25:78:28:a9:c5:7b:26:f7:4b:ce:4e:
                    2a:61:04:95:dd:2c:ee:36:eb:64:05:c2:f0:eb:7e:
                    8a:d4:6a:bb:e1:50:fd:d2:7d:0b:44:44:a5:37:2f:
                    a0:81:30:db:70:76:03:92:00:f8:f0:8d:a0:b4:b3:
                    36:a7:58:4f:d2:66:3d:22:df:af:eb:19:ab:10:2c:
                    52:9b:94:4a:e0:d8:3b:a6:39:7e:c2:08:42:05:06:
                    bf:f8:29:0b:e3:7f:76:33:ff:7b:86:d4:0d:ad:1d:
                    b0:8b:99:95:f9:d1:34:bb:1f:6a:46:4e:ee:2b:f1:
                    65:c7:ea:e7:44:6f:1e:f9:ae:fe:23:52:b3:ef:8d:
                    2d:9b:ec:d0:63:02:31:d8:78:bd:32:65:b9:a1:d1:
                    56:ad:cc:ab:ff:0f:c2:d8:8b:0b:8a:72:87:6d:9d:
                    74:a3:ce:fe:ee:7f:f2:d9:ab:b2:16:25:d9:4c:3d:
                    b3:d1:b8:c0:48:22:f8:a1:95:1f:4c:9f:e0:e6:bd:
                    e2:45:e4:73:ab:45:a4:b1:04:d3:53:30:3a:4f:39:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A1:45:7D:D0:56:A7:CF:21:77:F1:D4:93:60:EE:4D:37:B4:C4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:50:67:1e:28:15:c5:2f:74:bf:3b:38:a8:3a:f2:e1:c1:
         ef:d5:e4:26:73:a3:ea:f9:83:35:5c:e0:d8:96:2c:29:ad:7d:
         5d:c5:69:3f:da:79:33:be:6d:29:e2:a4:62:d1:40:ad:07:02:
         d0:66:f8:f3:6a:d6:7c:64:b8:f4:85:66:51:9a:c1:da:d4:d6:
         5b:23:bf:65:56:2f:61:e2:4f:de:3f:89:9e:a8:18:f5:da:8d:
         83:1e:3b:dd:ff:b5:41:37:a4:a7:0d:0b:f0:0a:f5:40:5b:58:
         65:9d:09:06:f2:ea:bd:a6:37:73:7d:ec:43:5e:89:76:8f:b4:
         30:15:18:fa:f6:43:9a:58:dc:6c:e7:66:99:0e:e4:aa:04:84:
         cb:b7:41:52:8b:cc:95:24:6e:3d:a7:1c:7e:8b:50:32:eb:61:
         48:5b:d9:8d:ab:8a:f3:2c:5d:ea:48:b5:f7:2a:a3:c4:87:3f:
         0f:f1:32:cb:45:84:11:a3:72:e7:d4:e0:fa:2e:48:f2:35:d9:
         a3:93:c5:fb:b5:64:54:0a:e4:63:d4:cc:e7:c4:38:af:1c:04:
         d0:4e:2c:26:7c:8c:26:b9:81:58:b8:d9:53:8a:7f:9c:28:3c:
         c2:97:68:ac:aa:07:f6:86:a3:ca:e1:88:22:c1:15:eb:0d:86:
         a6:1b:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:12:08 2024 by rpki-client on console-fra.rpki-client.org