Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa
File:                     916c3f1d-1340-37a7-8106-fdf9db78a154.roa (raw, json)
Hash identifier:          LiecIjaWf9BXJ6x4xwQ4TCHOqhNSvD6DVPTXae7pwag=
Subject key identifier:   BE:32:FF:CC:74:6F:BE:30:A4:2D:EC:7B:C8:E8:72:4E:FB:C9:C3:AB
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844E3A53C28D9E9D4B7AD008C00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa
Signing time:             Wed 14 Feb 2024 14:00:30 +0000
ROA not before:           Wed 14 Feb 2024 14:00:30 +0000
ROA not after:            Tue 14 May 2024 13:00:30 +0000
asID:                     29802
IP address blocks:        198.178.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:a5:3c:28:d9:e9:d4:b7:ad:00:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 14 14:00:30 2024 GMT
            Not After : May 14 13:00:30 2024 GMT
        Subject: CN=818ac9bd-0aea-4c45-a15b-57d1b763ad4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:91:79:19:71:27:fc:66:a1:8b:31:c7:29:
                    c0:91:f0:f4:11:85:45:09:70:26:4a:a4:b2:a0:18:
                    9b:75:74:e3:0b:16:72:2e:48:52:35:a8:0c:18:d3:
                    ea:75:50:a0:ba:54:1c:cb:26:20:03:07:34:05:85:
                    5b:25:1e:52:d4:93:9f:a5:40:0c:34:b9:9a:dc:49:
                    9f:34:70:07:16:9a:b7:9c:c1:00:4b:0c:31:71:e7:
                    66:d6:29:4b:03:6f:85:a6:ab:60:e4:18:0c:ec:0e:
                    52:56:65:ff:a8:9e:65:c0:63:f4:f4:1b:b6:8e:97:
                    8c:c6:9a:ad:d1:a5:00:97:5b:da:db:3c:9d:16:d0:
                    be:97:9d:b6:7f:f5:f5:1b:eb:5f:78:f0:a9:ea:96:
                    f0:3b:f5:33:6b:1c:2b:35:e3:17:75:cc:a3:4a:7a:
                    68:b2:e0:e1:9d:cd:3a:c2:28:00:b1:46:74:4a:e3:
                    aa:6e:46:b6:79:c8:96:f7:37:84:7d:9c:67:cb:af:
                    4c:5d:33:1d:07:f6:aa:57:f7:1e:40:fa:da:b7:5d:
                    63:9b:2b:43:bd:76:a2:21:41:0e:04:f2:e0:3a:15:
                    a9:62:15:f6:c6:60:5a:80:36:92:39:5b:1f:77:5d:
                    27:26:d1:f9:79:04:02:dc:12:f4:e6:dc:26:80:4d:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:FF:CC:74:6F:BE:30:A4:2D:EC:7B:C8:E8:72:4E:FB:C9:C3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:55:4d:f6:3c:60:d5:95:ed:65:fd:d4:f3:2a:51:4d:e1:
         4f:25:65:59:ff:51:3c:1b:9d:d7:17:c4:0f:be:92:32:5e:20:
         76:b9:ba:fd:76:4a:a6:6f:9a:73:cf:dd:b8:2b:7d:23:fb:34:
         2a:fc:7e:d0:7c:74:81:98:04:20:1f:fb:9d:91:89:1f:8e:27:
         ad:1d:dc:61:bf:41:28:4b:39:42:86:cc:6d:ba:c6:dd:25:0e:
         98:c1:91:45:ba:dc:69:eb:f3:e0:08:dd:4b:c8:cf:78:d4:7a:
         ce:9c:1b:39:d9:c2:fa:57:ea:3f:17:c3:56:cb:63:4e:b6:0a:
         78:d6:4b:47:c2:5b:70:5b:60:b0:ef:67:9a:b3:ee:b6:d5:e1:
         17:f0:8a:f5:74:1a:2f:fc:a5:f1:48:d5:15:f0:f3:e3:46:94:
         e1:5c:d0:5d:6c:b6:27:e3:85:c9:eb:28:4e:c0:16:fc:11:f4:
         5a:14:5f:41:ab:2b:c2:06:fa:47:6c:a2:35:9e:70:69:dd:69:
         97:ca:00:20:a8:70:7c:e0:c8:74:58:c6:45:88:2c:37:d8:98:
         0a:4f:e6:58:23:45:25:ae:4b:04:a1:47:22:a5:b3:c8:ae:e6:
         37:a4:c7:23:40:a8:3f:e5:e5:7d:ab:af:4a:85:e0:ac:22:97:
         1a:a5:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:00:02 2024 by rpki-client on console-fra.rpki-client.org