Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95a3cdab-26b4-3f62-835d-1ff69a5ae27e.roa
File:                     95a3cdab-26b4-3f62-835d-1ff69a5ae27e.roa (raw, json)
Hash identifier:          tw8WPxLFwZA9kda37n7w+g/cFISiR4bg7BzNA4zcnfs=
Subject key identifier:   A1:36:DE:B2:A7:B4:DD:AC:A6:CD:FA:49:59:2C:6D:D8:30:03:B7:8C
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF69B49FBC8FCA7AAE3E0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95a3cdab-26b4-3f62-835d-1ff69a5ae27e.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.13.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f6:9b:49:fb:c8:fc:a7:aa:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=a6cd0272-eac7-4498-bb30-0b5a68eb6af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:a1:83:4c:ea:53:0d:a0:ee:88:87:c8:cc:
                    48:0c:34:e0:a5:0f:b5:24:a8:5f:b0:f9:fe:48:f8:
                    53:b8:61:ed:84:4a:41:2b:b3:c0:c4:28:b7:8d:ae:
                    c6:1c:02:ec:0e:3b:82:00:eb:fd:d3:f3:0a:c3:0e:
                    c3:a6:b3:a1:88:1a:63:04:80:33:bf:b7:f7:05:28:
                    3c:0b:90:b2:b4:03:ff:5b:74:32:c9:6b:46:dc:d5:
                    d2:80:fe:32:41:90:4c:10:85:1a:b1:00:e3:2b:67:
                    14:0c:ac:31:c5:8a:9a:94:87:d5:9e:1f:b9:5c:0f:
                    b3:2e:9c:28:e4:2e:a2:79:23:98:2e:2f:ba:2d:68:
                    f2:4f:e5:f1:49:39:62:4e:27:ae:77:ab:b6:46:5f:
                    ad:54:cd:56:e4:ce:6e:58:ad:d1:31:a7:f5:67:5e:
                    b3:eb:5d:fa:fd:77:ee:7a:f9:67:17:cb:13:74:75:
                    45:53:7e:b9:2a:5d:85:b0:2e:bf:34:68:39:60:aa:
                    38:c5:e7:c9:a5:60:78:41:80:f1:c1:8e:67:b0:16:
                    e9:97:d6:df:2a:77:1d:bb:b2:c4:55:c3:59:c9:00:
                    3d:65:ad:03:3b:88:e6:cd:cf:e8:b6:3b:19:f2:25:
                    8d:5c:45:eb:e8:71:5b:d2:9f:60:c6:a9:5c:65:fe:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:DE:B2:A7:B4:DD:AC:A6:CD:FA:49:59:2C:6D:D8:30:03:B7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95a3cdab-26b4-3f62-835d-1ff69a5ae27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:aa:3c:15:fe:35:a4:02:fc:c3:f7:24:5f:0a:c6:73:e3:
         13:35:79:51:12:76:97:cc:14:c6:15:9d:b3:34:e2:60:47:15:
         fa:0a:b9:e5:4d:11:26:83:9f:5c:a9:6f:c8:c5:67:1e:d1:88:
         23:3d:da:15:8e:b1:12:64:a8:e0:0e:3c:2b:8b:21:19:37:96:
         1d:20:70:07:ff:1b:20:1b:c9:57:cb:3a:95:a5:7a:89:55:24:
         d1:8f:2b:4f:69:10:c3:14:35:0c:c8:29:85:33:1c:6c:46:4b:
         a9:56:99:be:64:6b:f5:1b:ea:d6:e7:99:03:c9:c6:ec:93:b5:
         83:c9:a5:57:3a:41:bc:6b:9a:cf:a9:74:5e:4c:3d:d4:96:fb:
         95:ac:86:a1:bd:45:e0:5a:7e:21:b8:08:b3:f1:61:49:2f:a8:
         87:79:eb:12:89:bf:93:73:58:ff:1a:84:b1:0e:85:d0:3a:c7:
         76:d1:73:0b:2c:25:66:e4:e4:fa:86:24:16:6b:8d:e1:ac:71:
         5c:3e:cd:06:09:68:ab:18:96:ed:67:7f:98:91:fa:72:17:ba:
         fc:d4:05:eb:9e:ac:a0:ad:10:bd:1a:7d:dc:a0:a2:19:55:a4:
         e9:67:c0:5f:77:8a:2e:c9:dc:4e:b3:f8:ae:00:36:0c:0f:a0:
         08:11:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:19 2024 by rpki-client on console-fra.rpki-client.org