Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
File:                     4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa (raw, json)
Hash identifier:          jzYkCDXj7Zl2ZUEPabW7v/WdW85ylDbr7C4oIcoH7bk=
Subject key identifier:   E6:3E:40:39:FE:7F:BC:64:6A:37:B8:B0:2B:89:50:9A:E2:24:56:51
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F43285845DC4678218C15BDD32D1D9D80
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
Signing time:             Mon 13 May 2024 15:25:54 +0000
ROA not before:           Mon 13 May 2024 15:25:54 +0000
ROA not after:            Sun 11 Aug 2024 15:25:54 +0000
asID:                     33343
IP address blocks:        170.110.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:46:78:21:8c:15:bd:d3:2d:1d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: May 13 15:25:54 2024 GMT
            Not After : Aug 11 15:25:54 2024 GMT
        Subject: CN=762476cf-c575-4ddf-b4f7-46e1c50acd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:a5:fd:44:07:bb:2b:72:6a:4b:c2:83:cc:
                    24:fa:24:2b:64:43:32:3c:69:d9:c0:aa:70:78:1e:
                    5e:a0:09:ee:e0:37:88:6d:55:ac:a0:4e:42:64:22:
                    ed:6e:ad:95:4b:2a:d9:30:92:d2:0c:23:7b:f0:86:
                    8f:55:5e:05:7a:d5:7d:f4:00:95:5c:fe:62:34:a0:
                    08:e2:d0:41:55:f4:b9:4a:01:80:f1:67:c0:81:7e:
                    f9:4d:88:b7:22:e2:52:5d:0c:0e:d9:8f:aa:62:d7:
                    16:64:9f:98:6b:55:78:9c:94:50:6e:55:63:8b:f4:
                    c3:11:fa:c3:1e:54:37:08:ef:d9:0a:b4:d2:03:a3:
                    93:78:78:d3:72:9f:77:45:61:74:e2:15:05:8b:f1:
                    2c:04:d7:9a:2a:e9:3c:30:2d:70:ea:2c:20:5c:28:
                    31:f1:1a:72:e1:28:31:28:a4:ae:cf:3e:b1:56:65:
                    9a:5c:a1:28:6c:57:e4:45:e9:c2:9e:c0:bf:a6:c7:
                    78:cc:d3:e7:ea:61:2a:ed:85:ae:d4:17:60:41:90:
                    52:b3:75:7b:bf:ff:89:b2:73:f1:4a:5b:df:83:7c:
                    e5:17:2f:b5:bf:f3:6b:30:9b:96:eb:14:7c:05:df:
                    d3:9f:e8:96:bd:ae:be:00:4f:21:a4:72:69:ef:07:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:40:39:FE:7F:BC:64:6A:37:B8:B0:2B:89:50:9A:E2:24:56:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:57:f0:14:ed:b3:cd:c2:ad:27:61:0b:8e:99:e9:1a:e7:
         05:a3:e9:90:b4:51:d5:37:e2:da:cf:a0:e5:ad:5c:22:5e:3e:
         85:d4:7d:9a:d7:5a:9d:a5:d6:40:e2:a1:14:26:b8:9e:dd:42:
         ad:97:82:46:45:b2:47:74:03:04:cf:16:ec:5e:72:97:6d:8a:
         59:33:1f:5c:ce:99:d5:52:71:2d:5d:49:06:1e:a3:d5:c1:bf:
         4e:c5:47:7a:c5:e9:9e:7e:23:07:43:75:cd:10:24:63:de:6a:
         f1:72:af:59:3d:19:aa:6d:6b:f5:14:fc:0b:be:2c:fe:b5:c6:
         f9:06:6f:1c:4a:ba:70:26:99:c9:aa:ce:ec:85:59:1d:5b:a3:
         41:1b:a1:f4:94:9b:c6:b1:2b:0b:3e:2e:5e:d3:ad:69:84:ed:
         39:09:d6:0f:60:74:74:ce:10:d1:f4:ef:6a:53:96:49:e1:e9:
         74:99:d5:e2:88:c9:97:21:b7:d6:5c:07:3e:f6:a0:eb:6a:0d:
         07:d4:e3:b9:e8:5b:19:4e:75:9f:e6:fb:82:a9:01:ca:7c:ac:
         77:4d:d6:4b:f5:d2:b9:94:32:60:a6:aa:f9:e3:59:9f:f6:80:
         80:4c:d6:91:dd:85:dd:7f:15:c2:ad:b8:df:5b:0a:33:e1:09:
         a7:98:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:53 2024 by rpki-client on console-fra.rpki-client.org