Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
File:                     482cda7d-a110-3978-a093-87780ba15fd4.roa (raw, json)
Hash identifier:          GAUn5mkX2sBpO0VUqW508seMWwEemyqioAVxcJ7zVMM=
Subject key identifier:   53:95:2F:C6:20:24:CA:29:24:00:24:F9:A4:50:4A:54:E2:07:2C:88
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F43285845227592D146EAF45B22869C00
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        204.16.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:92:d1:46:ea:f4:5b:22:86:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=f7ed42d3-3039-4c4f-905c-8923a41aafb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:42:1d:16:5f:98:b1:10:f9:a1:94:35:91:
                    d9:1a:19:f1:04:e9:3d:62:ab:26:dc:f3:d3:c1:08:
                    19:0c:48:10:1b:83:83:68:69:db:3d:6a:29:55:99:
                    7f:f0:c2:f4:fb:54:40:ec:a0:c6:6a:6b:3e:f5:4f:
                    cb:47:d1:a1:85:b1:e8:75:8b:d9:e2:c1:3f:82:44:
                    44:d4:fb:cc:73:67:a4:45:23:ee:b1:e1:51:41:4b:
                    3e:4e:cf:72:fa:98:2e:75:cb:e4:9f:69:f6:3c:87:
                    b5:7d:0d:74:be:d4:84:b2:ba:db:7c:0f:93:ec:16:
                    6b:e0:33:e7:71:2f:cc:0b:52:b2:e9:28:1a:da:c9:
                    fa:a3:44:b9:b4:09:c6:c0:09:35:79:a3:df:08:6f:
                    5f:53:82:dd:bd:ea:71:82:3c:24:75:98:2d:bb:d0:
                    fd:67:63:34:cf:80:4c:98:0a:f2:50:b1:72:88:25:
                    dc:6b:6a:03:77:f4:3b:c2:e0:3d:01:6e:0f:ac:48:
                    25:c2:53:39:e8:ca:aa:ce:26:a8:d7:af:d7:3f:9e:
                    6a:1f:13:af:9d:65:56:db:9a:cd:94:c9:dc:42:56:
                    c6:13:97:41:36:64:bf:14:08:f2:3d:0e:1a:31:86:
                    d9:11:13:14:78:a6:3f:03:7b:7c:9f:42:f4:5d:3e:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:2F:C6:20:24:CA:29:24:00:24:F9:A4:50:4A:54:E2:07:2C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:38:b8:7b:aa:fc:5e:94:f7:51:a9:8f:58:da:4d:f5:bb:
         f5:75:88:9b:a5:79:6e:a1:90:b9:d8:bd:91:cd:d8:57:1f:5e:
         5a:52:1c:de:e5:47:df:06:e2:c7:79:2a:c5:8c:07:d5:df:ab:
         33:c3:db:5f:82:c1:8b:2f:c9:e0:9f:90:6d:4c:a5:3f:5e:8d:
         a4:77:e2:5d:85:45:c6:75:d3:9f:ad:6c:1c:93:6c:e1:83:c5:
         20:e6:b7:08:26:9f:6c:aa:0b:df:65:79:2f:37:36:94:7a:ec:
         7a:64:53:28:c9:ee:5b:53:7a:91:a9:de:d4:b1:95:8a:0f:2f:
         c9:02:f4:5a:b2:26:a8:05:ab:44:81:83:9f:d6:6b:ce:13:c2:
         7b:d8:58:41:ac:14:a8:24:80:ca:02:32:8c:74:13:8a:3e:b4:
         70:81:db:2c:90:9e:f8:2a:df:f4:0b:10:5d:e0:5c:b8:4f:96:
         6b:d4:91:05:44:1e:ff:6c:d0:64:94:fc:de:91:be:b0:fd:b2:
         31:94:3b:83:c6:b3:a6:50:55:e8:74:d3:64:34:02:e6:a4:e0:
         47:4b:15:36:5d:b5:b1:63:60:ef:94:e8:67:0c:42:ad:d6:cd:
         98:95:ad:d5:34:71:ca:c1:ef:5d:1d:27:0d:8a:97:ca:9c:24:
         23:9d:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:16:04 2024 by rpki-client on console-ams.rpki-client.org