Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa
File:                     e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa (raw, json)
Hash identifier:          cj0b1+Y2g9imwucKgYGKDJ4hnOBbhlnm8MFvQhBI5jY=
Subject key identifier:   0E:2E:B9:78:A4:1B:B0:F7:DC:1A:7C:3C:43:ED:1F:F5:3F:32:DA:39
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F43285845561BF1B8450E1D388BF68180
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa
Signing time:             Tue 26 Mar 2024 14:01:54 +0000
ROA not before:           Tue 26 Mar 2024 14:01:54 +0000
ROA not after:            Mon 24 Jun 2024 14:01:54 +0000
asID:                     28753
IP address blocks:        168.91.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:1b:f1:b8:45:0e:1d:38:8b:f6:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Mar 26 14:01:54 2024 GMT
            Not After : Jun 24 14:01:54 2024 GMT
        Subject: CN=c544ad30-0b0d-44cd-98d5-cdc485b1c9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:d6:4b:22:a9:bc:ba:45:58:6f:ca:41:0b:
                    2b:a8:36:66:e0:0d:f9:19:e4:f7:71:92:83:b4:f3:
                    18:5b:7b:29:45:93:da:e8:3d:a5:0b:d8:f2:f7:cc:
                    c6:98:63:58:b7:67:d0:75:31:9b:c3:bb:78:47:93:
                    e6:76:24:0c:1a:d2:4a:ff:ce:a3:9c:f7:4d:09:67:
                    cb:a4:56:f1:d0:4b:dd:c2:21:15:62:8e:23:6c:d0:
                    7d:60:55:f7:2b:22:91:55:69:2c:45:33:8d:8c:1c:
                    f6:f1:8b:4e:1b:7f:0f:21:33:bb:21:65:06:59:e7:
                    88:86:9c:6f:e4:c1:6c:5a:97:ce:e3:d6:14:63:91:
                    0e:97:3b:32:8c:c8:89:01:6c:32:30:1f:4e:58:5c:
                    41:1a:e4:31:56:63:56:cb:6e:35:9a:c9:59:e1:96:
                    52:51:71:85:47:d1:2f:96:52:a9:93:5f:89:da:50:
                    13:5e:5e:29:55:eb:f6:9d:6d:66:f3:fe:10:db:e7:
                    19:72:07:88:ff:23:45:39:67:19:1c:d2:0e:d9:0a:
                    74:fb:49:24:8f:ec:84:ea:e3:de:49:bb:40:24:14:
                    09:d6:ed:da:6c:93:8e:3d:ec:d5:fb:d4:a8:78:42:
                    4c:e1:1e:c0:64:c9:a0:0c:cc:fa:a3:06:96:4a:d2:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2E:B9:78:A4:1B:B0:F7:DC:1A:7C:3C:43:ED:1F:F5:3F:32:DA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:be:c1:5d:6d:23:ca:dd:88:bb:35:f4:e2:4f:51:6e:93:b1:
         57:80:19:b4:0d:3e:a9:92:49:c0:4b:08:d7:db:61:7c:e3:f3:
         fa:93:8e:10:fb:5d:54:27:97:b7:6c:6d:b2:32:b8:dc:7e:bb:
         0d:36:53:72:47:16:af:b8:73:f9:13:7f:35:7d:a9:ba:31:9d:
         88:82:52:0e:29:78:3d:ea:0c:ca:ba:31:cc:77:96:00:7a:ed:
         0e:f8:15:20:8f:a4:56:7f:99:30:87:b3:4d:10:cd:9c:62:01:
         44:ba:ca:66:03:43:dd:8a:01:35:70:ff:cd:da:d1:df:69:57:
         10:5b:c6:b6:00:64:50:8c:5b:64:1f:d3:30:01:18:24:19:25:
         e9:18:5a:b1:50:f5:6f:6a:c1:4a:6f:e6:94:74:e3:d5:6d:b3:
         ef:cd:1c:d9:d1:de:5f:c5:b7:e1:35:19:4d:16:62:03:d1:98:
         57:48:d9:e5:35:3f:16:d6:4f:5d:ec:2b:16:aa:63:4a:63:c3:
         09:fa:b4:4e:98:c1:bd:dc:6d:7c:ce:ba:1c:0a:58:a2:f7:6f:
         9d:84:6f:70:25:3a:8f:d3:71:9a:e6:04:0b:bd:5a:63:8c:a9:
         92:c6:32:43:42:42:d2:d4:2f:0c:77:94:47:55:e3:ab:fb:c1:
         de:a1:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:59:55 2024 by rpki-client on console-ams.rpki-client.org