Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa
File:                     b6b4e916-9a15-3140-9552-e4bbf7451372.roa (raw, json)
Hash identifier:          LjdFqIhdwvymEqVlbo68pYnhaoAg4eyVaraP4p+aZrA=
Subject key identifier:   43:B7:F9:10:47:11:32:A2:B7:30:C7:67:42:90:FE:50:89:EC:85:98
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584522759644E79BF8AD6289F500
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     210873
IP address blocks:        16.10.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:96:44:e7:9b:f8:ad:62:89:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=62e78002-26fc-4c48-a1a3-06710b719073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:8f:f7:53:b7:13:b4:54:32:17:8c:f2:42:
                    d0:bd:69:b9:c1:85:03:67:78:dc:0c:40:65:b0:e9:
                    8b:d3:47:3f:66:e5:7e:b9:d4:e5:ef:e1:46:bb:86:
                    2b:28:ff:8f:04:10:08:7f:ef:0b:24:13:0b:4c:88:
                    ae:92:19:5a:20:4f:29:8b:19:dd:fe:73:59:b5:e2:
                    9f:58:22:25:f3:c7:f7:59:05:79:17:89:3e:e6:26:
                    72:15:81:47:da:46:7f:e7:f9:87:88:5b:de:9c:18:
                    87:96:3e:16:e8:8f:2b:84:51:f0:fd:b6:b4:f8:7f:
                    52:96:cf:33:65:4b:d4:00:12:7b:c5:19:39:17:7b:
                    8b:1d:e1:5c:46:96:13:73:e6:88:a1:c2:8b:3d:09:
                    7b:8b:d1:91:09:15:44:71:ad:a6:f0:96:f1:3c:47:
                    2b:eb:aa:2f:f4:2d:07:dc:46:51:c6:dc:47:dc:a5:
                    2d:e1:bd:30:c4:c3:bb:3e:26:1a:71:67:c2:76:b9:
                    6d:28:eb:87:cf:ce:b9:4b:b8:e0:02:bc:64:b3:6f:
                    c6:9c:2a:79:ca:59:db:70:84:5b:e3:89:f6:b7:34:
                    98:ef:5c:e4:99:f0:05:43:db:84:1f:d8:a3:33:7d:
                    a9:9a:30:b7:b4:d1:21:d7:f8:7c:8e:bf:08:2b:32:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:F9:10:47:11:32:A2:B7:30:C7:67:42:90:FE:50:89:EC:85:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:bc:30:54:19:2b:54:3d:1c:49:08:8e:cf:15:e8:78:7f:
         1d:0d:b9:3c:f5:bf:9e:46:fc:4f:0a:fd:c0:4a:f8:91:79:a0:
         b5:45:9f:89:9b:59:f2:2c:f2:2e:41:66:f5:4d:ba:30:f1:53:
         f8:3a:07:51:e8:72:bb:fe:67:f4:37:92:09:54:38:8e:7f:5c:
         44:21:b0:e7:83:c3:f7:e8:5d:a6:64:06:e7:b7:81:52:4c:82:
         de:ab:f0:03:05:7a:21:4b:bf:94:a4:35:b9:8b:b0:56:7e:5e:
         b0:05:6f:ca:36:e4:bb:42:e9:e7:d0:34:37:34:af:6c:d5:e3:
         ad:17:78:72:d9:a8:0d:9e:a0:4c:76:df:57:86:8d:60:f1:97:
         ff:43:f2:3c:99:ab:f6:3e:74:2f:81:cf:25:ed:da:8e:37:a8:
         12:8d:a9:e2:c9:aa:d0:d3:b8:5c:74:64:98:d6:01:82:9d:11:
         e9:ae:e5:7a:a2:74:e2:8d:b4:0f:6e:1a:9c:ff:e3:cf:e5:71:
         ca:6a:11:fa:06:de:f3:40:6b:40:3d:d2:a0:51:8e:dd:fe:51:
         49:62:98:77:08:1d:38:c7:0a:7e:05:24:eb:32:b9:6d:a3:3b:
         8d:1e:02:22:81:10:6e:5d:b5:ad:33:3b:4b:95:b8:75:d4:06:
         08:ef:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:22 2024 by rpki-client on console-ams.rpki-client.org