Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/0d48e45e-4088-3a5c-9ceb-91f52489a8db.roa
File:                     0d48e45e-4088-3a5c-9ceb-91f52489a8db.roa (raw, json)
Hash identifier:          QgoJAC/RAFUd2OFCmqcuvMlGysYxpWBWPTSMGeWwObI=
Subject key identifier:   ED:76:95:BD:7D:BE:8B:50:4C:D7:4F:D8:E2:6F:FD:85:55:F8:AB:BC
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285845DA98F2E79C89CBB2D419B480
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/0d48e45e-4088-3a5c-9ceb-91f52489a8db.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        199.255.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:f2:e7:9c:89:cb:b2:d4:19:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=cb4a893c-92f0-4dc0-8d29-db2c45aef1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:e6:ee:ff:72:40:b3:4e:18:20:a5:01:4f:
                    05:e5:c0:36:1f:38:e0:5d:1c:d5:b7:c3:6a:eb:28:
                    2a:55:46:b3:a0:2f:bd:5c:82:2f:f6:4a:85:26:9b:
                    61:08:43:81:fc:12:21:c5:98:bc:ef:f8:6f:92:8b:
                    b7:31:5f:da:2b:74:f7:4c:14:a9:f3:40:7a:6e:04:
                    8c:d7:f2:69:18:b1:26:62:1e:71:16:76:d3:45:f6:
                    9a:cd:c1:72:24:72:b2:5a:97:55:7f:b1:79:0f:af:
                    78:1f:35:4a:c5:e5:23:ba:b7:cf:1f:90:a9:e0:0f:
                    29:5f:5d:da:8f:54:57:5f:08:86:66:37:e4:31:ef:
                    31:11:12:dd:3d:45:26:23:3a:f4:a1:d4:67:f4:ec:
                    1b:72:a5:52:73:be:3b:39:7e:76:5d:27:60:fc:35:
                    91:2e:aa:6b:15:59:da:0d:64:77:cf:00:8f:d2:ca:
                    9c:f1:b4:9e:47:99:7c:3b:9f:4f:12:c0:dd:e4:71:
                    98:89:8d:a7:00:a2:8d:86:48:bc:7e:7f:34:14:97:
                    3f:da:86:37:2a:9e:8e:03:33:7f:a7:6a:6e:66:a3:
                    9a:75:17:85:0c:a2:06:ab:9e:f7:b5:70:c8:4f:ad:
                    a4:cc:56:37:a4:e6:79:0d:a7:eb:60:0d:09:3b:7f:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:76:95:BD:7D:BE:8B:50:4C:D7:4F:D8:E2:6F:FD:85:55:F8:AB:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/0d48e45e-4088-3a5c-9ceb-91f52489a8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:96:d9:8a:0d:85:2a:47:1e:c0:67:55:16:f9:57:33:6c:
         f4:f7:e5:23:cc:9e:c0:5f:dc:13:f4:93:0b:6b:e2:ad:2c:b7:
         fe:35:a4:69:a8:23:91:a3:26:1b:eb:83:d6:df:b6:a7:56:c0:
         33:79:81:af:d2:62:c6:05:f6:ef:53:7e:c7:1e:9e:c8:23:1f:
         7c:f9:60:a7:9f:03:52:dd:c1:0e:83:52:27:c1:05:ec:d0:d2:
         d2:6c:8a:3a:db:20:43:15:47:17:bc:5e:aa:3c:70:e1:05:53:
         2b:bb:3b:f3:ae:5f:3e:71:ad:ee:0f:09:de:40:de:b9:ee:31:
         7b:f0:de:49:20:d7:fa:c7:76:2f:60:b2:3b:24:01:69:c6:6f:
         47:ab:0f:f9:ff:52:97:78:cc:d0:ab:9e:0b:09:94:8c:ba:e6:
         57:41:a7:85:99:c0:bb:92:86:27:4f:5b:8b:dc:67:24:ef:1d:
         c5:52:a0:be:c3:5f:b3:39:72:3b:08:c6:0d:3a:e4:78:95:2f:
         cd:5f:02:50:aa:4d:ed:fc:fc:88:8e:f7:27:a3:b0:5f:e2:c2:
         1f:b1:cb:b2:03:9a:ed:60:d8:91:d9:6f:75:5f:f3:15:dc:1e:
         25:c1:ab:01:b9:71:ff:c1:10:6f:e6:0a:60:89:61:de:8b:85:
         f8:bb:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:06:47 2024 by rpki-client on console-fra.rpki-client.org