Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
File:                     fd86afa8-57f3-379b-a855-4d084ac157bd.roa (raw, json)
Hash identifier:          IFmFZ7L64EJD3YGEth0qk+TWVHiF/sKdVX0CLC7jsWg=
Subject key identifier:   93:BB:6A:B6:B5:0B:47:00:F0:BC:21:6C:22:70:EE:A9:73:B0:9B:CA
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845CE09087EA8EE5006813EC180
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     27321
IP address blocks:        192.158.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:08:7e:a8:ee:50:06:81:3e:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=139aed1a-e027-44a4-bf68-e15b2ff1f5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:82:4b:5f:75:ff:7a:36:25:8c:87:05:dc:
                    56:0b:8f:b5:ba:98:ce:aa:df:f1:78:86:b0:4d:02:
                    87:a9:50:14:16:60:70:37:7f:74:a1:cc:b8:1c:ea:
                    6f:b3:c1:a9:99:99:ee:80:01:14:74:17:15:50:95:
                    ef:28:c3:27:cd:6d:ee:25:1a:89:cd:ff:b4:0a:aa:
                    bb:b0:86:dc:41:15:c8:9f:71:83:87:7b:dc:19:9d:
                    71:81:4f:5f:27:0e:04:9c:c5:3d:1c:65:ca:04:4a:
                    ce:17:2f:be:80:b6:04:00:ff:18:00:cb:5a:32:bc:
                    69:72:c3:af:f6:f4:ff:c3:83:22:85:c0:13:2f:59:
                    de:f4:6c:78:9c:1e:3a:98:8d:56:c6:fc:11:c4:f0:
                    c9:20:99:b0:d3:14:4f:ac:ad:16:6e:c1:34:df:82:
                    3e:aa:9f:94:6f:20:1c:a8:5d:89:dc:ab:92:45:92:
                    a8:66:4b:e0:05:95:14:8a:31:60:d4:d0:49:92:e6:
                    68:3e:ac:46:ea:2d:f4:b7:60:81:fe:10:22:06:00:
                    f2:bd:1e:3f:b7:62:fa:25:5e:1e:68:a2:90:fa:d0:
                    18:e2:98:05:fd:2c:2b:b9:af:2d:c4:95:65:66:eb:
                    9e:cf:02:98:43:77:5c:65:ea:61:12:15:e3:42:e9:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:6A:B6:B5:0B:47:00:F0:BC:21:6C:22:70:EE:A9:73:B0:9B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:35:9b:ba:12:1d:49:70:5d:8a:5a:1b:02:04:c3:80:d8:02:
         d8:95:35:b0:a3:24:44:2c:dd:1a:73:d2:95:a1:51:36:36:ce:
         17:4c:b1:d5:ad:84:91:13:a4:53:ff:f1:c3:02:7b:04:c2:d8:
         4c:72:a5:b5:d6:15:26:16:20:69:aa:4f:c2:bf:97:18:f3:3f:
         98:1a:be:f3:91:0b:30:83:80:ea:ab:01:9c:75:3f:71:8b:1d:
         97:ab:10:4b:b3:20:94:61:2c:83:c3:d6:80:41:ae:94:f6:7d:
         b0:b2:03:fd:ff:b1:aa:69:d8:2a:18:d6:f8:6c:03:10:2e:b3:
         aa:2d:7c:5a:33:a5:02:a2:92:c6:54:03:06:c7:80:21:3d:e2:
         3b:58:31:a5:eb:cd:b0:68:11:5e:1d:aa:69:f2:64:94:b2:c1:
         96:71:51:e5:07:5a:cc:a1:d6:6d:f5:47:40:d2:55:5d:e9:94:
         f6:4f:c1:ad:f9:ef:55:49:1a:c6:34:e6:61:89:f3:5f:d8:5b:
         fd:2a:f0:9f:88:a8:5c:71:26:29:43:ce:62:42:40:42:26:73:
         68:b5:30:0a:af:94:75:d3:92:8b:31:3c:11:51:40:93:86:fb:
         f5:2a:5a:66:f0:91:4f:eb:9e:fe:10:46:28:ee:73:46:f6:f7:
         c5:bf:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:12:24 2024 by rpki-client on console-ams.rpki-client.org