Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
File:                     67701918-208f-334d-8a27-2895fe2771e3.roa (raw, json)
Hash identifier:          uvnfOKRYnLwoaPMroTZD28CQ+TiacZAipX5oTm3hFSI=
Subject key identifier:   79:5F:53:22:73:DC:50:96:90:76:A6:00:E0:37:6A:9A:52:19:80:AB
Certificate issuer:       /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial:       010D0C9F43285845F51E8D20D9A81DA6AC41E200
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     212219
IP address blocks:        216.252.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:8d:20:d9:a8:1d:a6:ac:41:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=cb2db288-4b97-40c7-b3bb-2201f848e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:a6:be:a1:a7:60:fe:77:8a:41:f6:0b:3c:
                    0c:40:16:cb:54:ac:4f:4d:cb:38:b1:5d:85:68:63:
                    6e:1f:62:35:78:33:cb:be:ab:f5:43:57:24:11:67:
                    07:d2:ec:12:8a:a6:6d:2f:c7:a4:4d:c2:20:f1:88:
                    e1:41:de:f8:51:03:f6:9c:a4:09:51:24:3b:56:80:
                    87:d8:be:7e:c9:45:0a:37:34:7b:2b:18:2f:80:13:
                    c8:e8:48:79:b5:49:05:05:96:17:33:d5:d3:0c:2e:
                    71:09:a6:88:fd:56:f3:66:32:f1:f3:c6:ba:50:ce:
                    bc:7c:9f:f3:18:5e:3e:6f:58:20:7a:41:ff:5a:58:
                    99:ec:42:8f:da:da:0d:e1:d8:2c:55:92:37:f5:f2:
                    b3:46:fb:b3:5b:d7:b8:6c:9e:54:62:3b:15:e5:88:
                    30:fd:50:4d:74:53:ce:df:a6:11:41:e5:78:49:57:
                    92:4d:38:67:27:c1:aa:87:0d:55:a8:d7:9c:01:fc:
                    fd:49:28:e9:4f:83:83:41:50:92:b5:d5:0b:28:46:
                    fa:10:0a:5c:f6:f1:1a:b5:04:1e:25:0e:d9:9b:77:
                    96:0a:f1:51:09:35:eb:de:45:3b:6c:fd:46:85:7e:
                    6a:42:75:e0:a2:f8:72:ea:03:cf:c7:d3:0a:1c:54:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:53:22:73:DC:50:96:90:76:A6:00:E0:37:6A:9A:52:19:80:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl

            X509v3 Authority Key Identifier:
                keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:a0:9f:4a:c5:fb:7d:b4:ce:9b:e8:6c:c5:cc:73:d0:4b:
         3f:7d:64:b3:2e:aa:13:00:8a:a1:fe:1a:1e:c1:79:e9:12:95:
         08:3d:e9:a1:39:13:4a:b6:cd:e6:25:7e:4b:69:2c:4c:0b:36:
         4a:7d:d1:32:95:b2:fc:a8:28:90:15:0e:f0:0e:d3:c6:99:8b:
         b0:3c:4d:8e:35:e0:47:d6:1c:2f:a1:fc:45:b4:2b:9e:53:40:
         e6:44:8b:c4:48:8d:57:86:cb:17:61:80:b6:c7:e0:a2:d9:1a:
         f8:72:2c:17:c8:c4:be:d6:30:73:94:72:30:bb:3e:e5:ad:19:
         62:a2:45:cf:ac:e7:ce:e8:c2:59:02:b8:de:ca:34:dd:9c:21:
         ac:aa:84:d1:c3:1b:4f:40:70:55:15:e4:1c:34:52:e7:3c:b0:
         1a:26:f4:e9:3d:21:20:19:e6:8d:87:f1:69:d2:c8:72:dc:9c:
         97:18:f8:83:48:37:da:39:05:ee:6e:db:5b:ef:7a:e7:cd:2e:
         fa:04:8f:ee:c7:74:6a:72:2d:b2:5e:a7:95:a8:43:2a:51:39:
         50:80:b4:ea:18:70:99:20:8c:65:02:3a:a6:b9:22:61:a0:1f:
         c8:1d:41:80:d6:e3:07:69:53:44:33:70:18:40:2d:fe:85:d3:
         df:5e:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:12:08 2024 by rpki-client on console-ams.rpki-client.org