Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa
File:                     21a0c58a-4800-3577-9931-045250e849eb.roa (raw, json)
Hash identifier:          H+9DPWt8IFFiWx0ktKw0+FbnRT0t+CEIr8mVL7BNNew=
Subject key identifier:   FF:87:9D:03:80:BE:9C:E2:6E:4F:C1:B8:99:39:B5:DD:E9:4A:62:82
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F432858452C1D3DCFE76FB55450A26618
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     40805
IP address blocks:        208.82.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:3d:cf:e7:6f:b5:54:50:a2:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=91e4f929-ee48-4a25-ac1c-51e1b4610947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:08:4c:aa:92:01:f7:57:40:0b:1b:dc:9a:
                    43:bb:23:4f:39:18:fe:4e:55:49:02:c2:c8:2b:89:
                    1e:f7:e9:d3:99:1a:b0:eb:82:af:c7:a3:8d:fd:8a:
                    77:77:49:dd:ff:94:4d:ff:9d:03:d6:ec:05:bb:60:
                    8b:9f:ee:d0:d0:a7:de:6f:28:10:09:a4:07:40:49:
                    56:71:35:08:fe:3e:ee:95:7a:76:08:d8:e1:2e:91:
                    3c:63:4e:f7:dc:21:01:2a:11:b4:4e:1a:6b:8e:ab:
                    44:66:62:c2:e5:be:e3:ab:30:c3:70:9a:55:36:cd:
                    85:2e:2c:b9:fd:2b:99:6f:f0:9b:cc:ff:66:a4:e7:
                    64:a7:5e:a6:a1:eb:82:bd:65:c9:d3:81:9a:f2:d4:
                    61:f2:00:41:db:cc:ce:49:e4:52:1f:ec:b8:ad:a3:
                    85:11:a4:0e:ed:70:95:d8:a6:ce:67:80:cc:79:de:
                    88:64:a1:0b:0d:d3:28:1e:b7:1b:64:f7:9a:01:86:
                    91:3f:2e:ed:2f:19:03:8e:b0:8e:7e:29:7b:6c:24:
                    c8:16:ee:01:5c:a8:90:e2:54:f5:ea:39:79:10:6e:
                    fa:b5:37:4d:60:50:ed:84:fa:90:23:4c:5f:9a:5e:
                    f9:00:68:24:bd:5d:92:a6:fd:3f:89:71:07:70:55:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:9D:03:80:BE:9C:E2:6E:4F:C1:B8:99:39:B5:DD:E9:4A:62:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:e4:dd:58:a2:eb:99:fc:40:c9:b4:36:c6:8e:b6:28:30:
         cb:c7:68:ee:65:0f:7e:34:99:c8:70:10:bc:02:c9:e1:3a:0a:
         ab:b7:47:33:c2:9e:66:41:15:60:0f:b5:62:75:d8:3a:a1:a2:
         78:63:2f:0a:0c:aa:e3:08:dd:53:2a:bb:4a:be:14:d6:ba:af:
         fb:2f:32:95:79:11:49:c4:33:fc:a6:99:9b:92:8b:ab:51:ff:
         98:5c:a9:be:3e:60:82:40:9a:5e:b0:4a:98:24:3d:fb:ab:9b:
         04:64:12:00:aa:57:21:b3:e7:1e:64:c7:50:92:9d:2e:1e:74:
         10:83:c9:c8:fa:63:ee:e0:a9:ff:bb:3f:35:49:24:d2:56:7a:
         d4:50:20:6b:a7:f4:85:b3:c9:27:3d:f0:d8:3f:dc:00:d6:b9:
         59:58:70:57:76:ff:4e:46:9c:72:f1:78:1c:d0:ae:b3:5b:b1:
         da:8b:ed:9d:d7:8b:dd:b6:70:9d:82:cf:cd:0d:ea:51:31:5f:
         ad:33:a8:33:28:49:83:9b:f4:95:43:06:cf:c3:d0:46:ac:43:
         10:36:32:c1:b9:a6:fc:b0:fb:ad:af:cf:39:f1:43:56:d3:48:
         d2:35:15:93:e7:cd:0d:7c:79:a2:14:2d:6f:97:94:cf:91:43:
         42:74:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:48:41 2024 by rpki-client on console-ams.rpki-client.org