Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa
File:                     a50b5022-2980-3c8b-9135-ef6ad61f4658.roa (raw, json)
Hash identifier:          /alrdO51WmdErE/y03dEg7Q6bg08ufcY61T3sTJWOdY=
Subject key identifier:   D6:B1:76:2D:57:55:5A:CD:A5:3F:DB:5C:48:25:21:DE:01:EC:14:97
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CE090AA70F320CF49331A440
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     13414
IP address blocks:        209.237.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0a:a7:0f:32:0c:f4:93:31:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=44d9bbb5-a261-4bc9-b241-7ab970af07f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:c3:96:9b:f3:2f:7e:aa:2a:4f:1b:f5:d2:
                    5c:a2:5a:93:c3:2f:f2:b0:37:dc:ec:4f:8b:7a:ed:
                    df:6c:ab:12:13:c4:18:50:1b:49:e0:41:8c:a6:86:
                    6f:61:d3:57:f4:03:5e:65:2c:b6:2e:ca:ce:80:26:
                    67:75:e5:d9:d5:87:b7:ca:b8:c3:08:1e:0b:de:c6:
                    b2:44:ae:c5:37:c1:5e:8e:f7:60:40:25:f5:01:6d:
                    b1:cf:e6:d1:8e:e3:bc:4b:0b:0f:fc:be:18:67:5e:
                    5d:a7:9d:67:0a:82:05:01:f4:1d:a7:a7:91:cd:2a:
                    e9:67:6f:67:e1:23:bc:bd:3e:be:89:d6:48:c3:17:
                    6c:3e:76:9f:00:ff:ba:30:3d:5d:51:47:d8:cf:20:
                    8b:67:7c:ee:18:7f:f8:54:5e:9a:9c:94:34:fd:18:
                    ab:56:00:82:b4:a3:8c:3a:62:0e:32:3d:bf:e6:85:
                    d6:d7:60:3d:c5:95:41:01:f9:32:34:61:2e:01:6c:
                    04:eb:e7:6c:cf:85:fd:51:8d:cf:20:5a:8b:0b:67:
                    18:95:cd:2d:9a:46:b9:90:7a:2e:ea:e9:08:1d:2d:
                    8a:e9:35:66:ba:3b:9a:09:13:30:fc:56:9a:a5:d3:
                    e5:e2:58:f6:67:81:d0:6b:a9:0e:05:2b:77:62:41:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B1:76:2D:57:55:5A:CD:A5:3F:DB:5C:48:25:21:DE:01:EC:14:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:d2:93:47:96:37:bf:d2:e2:57:b8:22:69:f5:21:0e:90:0f:
         94:e2:5e:60:19:1e:e0:5e:24:30:f5:b9:5e:5e:44:f4:95:d5:
         8b:27:e7:cc:b6:5a:d7:9c:77:67:73:0c:22:62:be:f7:0f:2f:
         25:c7:2c:24:fd:ce:29:39:d2:9c:f6:0d:d6:23:d2:34:bb:cc:
         ad:9e:54:12:ec:61:e6:9c:9c:06:48:9d:88:1a:1e:b1:3c:44:
         3f:0c:f6:27:17:13:29:f0:c2:4d:84:25:50:f5:f0:6b:c1:47:
         37:d9:15:8f:c9:77:70:e5:70:c5:e1:bd:ae:bd:b1:47:8d:d6:
         65:d7:85:c4:57:8e:bb:36:d1:cc:b3:aa:3c:aa:b3:1f:29:7e:
         ba:fe:54:23:49:49:99:9b:c9:1c:2b:4d:d0:73:50:99:cd:fa:
         1b:ac:44:ac:42:dd:7e:42:73:5f:45:c3:0b:ac:e2:fd:6a:ba:
         18:6c:2e:4e:13:f3:d0:60:4f:27:21:5b:c5:f9:73:44:c9:e7:
         1c:e7:de:68:81:18:c3:79:81:8f:42:57:9c:44:ad:3e:d5:3f:
         ef:00:b6:f0:33:70:f4:1f:57:b0:73:9e:0d:c0:cd:56:48:a8:
         64:5e:96:a9:11:f1:94:1a:70:4f:9e:73:26:e9:c3:da:70:66:
         82:23:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:31:03 2024 by rpki-client on console-fra.rpki-client.org