Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa
File:                     78268fec-2d74-3b2d-b220-eb20428f1a7a.roa (raw, json)
Hash identifier:          wgKie0+/w1lEzanqyt2UAfrUc5jIIfx4BcLmdIDAFPM=
Subject key identifier:   4B:83:63:6C:0F:B4:6B:8D:C2:1A:46:39:C1:34:3C:1F:A2:EB:66:3F
Certificate issuer:       /CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
Certificate serial:       010D0C9F43285845FD7E93756149CCFD92857A00
Authority key identifier: 85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa
Signing time:             Sat 25 May 2024 13:00:35 +0000
ROA not before:           Sat 25 May 2024 13:00:35 +0000
ROA not after:            Fri 23 Aug 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        167.88.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fd:7e:93:75:61:49:cc:fd:92:85:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
        Validity
            Not Before: May 25 13:00:35 2024 GMT
            Not After : Aug 23 13:00:35 2024 GMT
        Subject: CN=b4274c0e-7a17-45f2-b0d1-3b2c36d30a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:07:c3:96:43:cc:08:9b:f4:1e:f3:ca:0e:
                    b6:ae:6f:7b:57:4c:2e:c2:6b:59:2b:3f:ce:da:4e:
                    fb:9c:15:b5:57:49:6f:8f:fe:89:6d:ac:3b:09:c2:
                    17:a8:2c:15:33:37:a4:6e:fe:9b:d2:57:53:b6:14:
                    88:0d:6b:68:bc:91:47:7f:4a:13:5c:5d:5e:2c:cb:
                    b8:b4:11:51:79:bb:2b:d6:80:5b:9d:f1:0f:1a:b6:
                    64:af:4d:f9:3f:c9:3c:74:d2:7d:d4:ec:c8:05:d7:
                    c3:fd:6a:e9:2a:5e:54:54:d5:2a:c8:0a:f1:2c:dd:
                    0a:7c:d0:19:21:c2:6c:ec:ee:af:ec:1a:bb:c8:1d:
                    de:90:ef:74:ec:e2:33:70:00:3a:b4:19:9d:74:62:
                    e0:85:0d:31:12:2f:a3:f7:c8:e2:ef:43:6a:f9:03:
                    05:50:a9:ae:35:6c:91:41:e4:f2:b2:b4:1d:01:25:
                    06:78:55:85:8c:4f:f8:1f:31:b3:d3:0d:49:42:e8:
                    3a:46:82:9c:47:4e:f6:90:3d:27:97:97:4b:2a:f2:
                    8b:37:3a:3a:c0:8f:99:41:a4:51:63:bc:46:70:4e:
                    97:f2:43:26:06:fb:8d:d0:30:53:84:d4:11:95:b3:
                    ec:b0:9a:53:6d:6b:14:7f:dc:af:e6:8d:4d:2c:35:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:83:63:6C:0F:B4:6B:8D:C2:1A:46:39:C1:34:3C:1F:A2:EB:66:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl

            X509v3 Authority Key Identifier:
                keyid:85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:fe:56:88:cc:83:92:37:b5:83:7f:6c:77:15:39:9b:ca:
         3c:f1:90:f5:3e:65:2d:38:d0:61:c0:b5:90:a6:2d:91:29:0b:
         57:51:54:57:ae:4a:37:c4:7e:9c:7b:50:54:c2:bc:b5:72:75:
         3b:b8:57:6e:56:ce:42:fa:81:99:1e:c8:e1:91:2a:43:da:4c:
         3f:64:f6:d2:04:21:ca:2e:ef:f4:a0:f7:fe:72:87:0b:76:cb:
         4c:7d:a2:c3:86:d0:27:8f:0b:8c:d7:bc:d5:4b:5c:30:b6:ef:
         03:75:dd:2f:74:a7:69:cf:ca:ce:dc:78:72:c0:87:92:88:91:
         c4:5d:62:16:60:8b:2f:d7:b2:4d:91:43:99:2d:29:12:69:32:
         57:f6:05:5b:fe:c6:9e:9b:41:5d:20:21:04:db:9c:b2:0e:22:
         88:b3:61:ff:ca:21:20:d6:0f:ef:b8:08:08:ba:c1:58:e1:ab:
         7e:68:ee:c7:4a:59:dc:77:3a:00:8b:37:cf:e1:16:7f:f1:6a:
         4c:d6:ac:08:06:7a:54:74:56:2e:d8:35:9a:2e:2d:5f:ab:7e:
         ca:c3:7b:46:53:23:3b:c4:b5:8c:81:ce:79:55:8f:54:07:c7:
         a2:ae:49:28:b9:f8:04:89:f8:c8:46:42:0f:b4:17:83:5d:9f:
         90:ab:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:10:12 2024 by rpki-client on console-ams.rpki-client.org