Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
File:                     0299a712-fc10-3ade-be7c-01c58b9e9b23.roa (raw, json)
Hash identifier:          bBF1z72cV3CPY1FXWCqvXuZCkLCpURBjclGFa2IWImg=
Subject key identifier:   6D:2D:89:5F:7F:03:7D:1F:36:80:9E:CB:2F:06:D7:16:E8:18:1E:82
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462562A8E675D391FA9DB43C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
Signing time:             Wed 20 Mar 2024 20:47:59 +0000
ROA not before:           Wed 20 Mar 2024 20:47:59 +0000
ROA not after:            Tue 18 Jun 2024 20:47:59 +0000
asID:                     15169
IP address blocks:        216.58.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:62:a8:e6:75:d3:91:fa:9d:b4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:47:59 2024 GMT
            Not After : Jun 18 20:47:59 2024 GMT
        Subject: CN=e8f994f2-523f-4fce-9638-3ac8bd0c86d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:5b:7b:a8:b0:de:90:0a:8c:94:34:2b:26:
                    64:d5:c0:86:ae:d7:d4:1a:28:5e:0a:9c:53:7f:99:
                    39:e9:34:ea:43:1f:1b:9f:62:a2:07:84:72:71:b8:
                    d4:4c:07:60:f5:71:30:75:3d:12:5e:63:42:85:09:
                    c0:1c:e5:b1:2a:b9:8d:29:99:82:a7:ad:35:f0:07:
                    8b:86:70:8c:76:e4:35:53:83:98:a5:d8:72:ca:e8:
                    fc:a4:ad:74:47:22:4d:39:c3:95:ad:a0:a4:37:df:
                    ab:d5:70:0b:2e:a7:f1:b5:53:90:72:56:f5:78:cd:
                    02:e2:a3:79:b8:52:fa:c1:17:f6:c1:b6:cf:e7:10:
                    9e:4b:0a:d0:0d:32:93:b2:df:ca:6d:09:65:6e:53:
                    6b:53:7e:69:de:58:82:b8:28:b1:90:a9:32:8a:ae:
                    29:8d:8d:5c:cc:e9:10:f7:14:78:1f:2e:f1:54:f1:
                    fe:75:95:85:1c:5b:b2:14:f0:c0:59:2b:1b:8c:6b:
                    20:1a:63:c5:ab:c8:be:3f:42:c7:fe:b8:b3:aa:2b:
                    57:ff:1a:c8:a7:9d:8e:62:87:ab:5e:62:2c:fb:44:
                    89:5e:c9:53:f6:bb:75:51:5a:b1:25:13:cd:09:20:
                    92:74:5a:d3:a5:21:b1:49:ba:b3:d9:34:4f:03:93:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:89:5F:7F:03:7D:1F:36:80:9E:CB:2F:06:D7:16:E8:18:1E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8d:5d:66:50:1c:3d:bf:43:ae:aa:e8:40:19:80:24:f0:02:
         25:3e:63:d1:b1:37:05:d3:cd:04:0e:23:6e:57:8c:6b:9c:68:
         96:e3:07:17:24:66:d6:3a:b6:ea:00:aa:26:2a:94:66:39:ef:
         9f:e3:f2:1b:6d:13:e1:0b:ed:af:c9:a7:41:dd:b3:0c:e5:f4:
         7a:4c:19:82:0a:19:ee:f0:73:55:01:73:27:43:40:77:16:4a:
         ac:f1:6f:72:b7:e8:d4:8e:97:60:29:ff:09:a6:aa:3b:bf:6b:
         d8:0f:98:48:aa:85:eb:b7:7c:83:0e:66:f5:a9:24:ec:28:1a:
         81:6e:ff:8e:87:1f:0c:1a:ad:bf:89:de:f9:22:01:49:41:91:
         82:c7:44:0f:13:bd:19:a3:9b:dd:f8:09:35:b2:85:05:9f:23:
         98:fe:46:1d:91:bb:bc:89:6d:f8:39:83:38:82:d1:f4:24:21:
         ff:af:2f:31:72:5d:fe:da:27:90:75:f7:80:ed:48:12:83:e6:
         1d:51:a1:57:c6:32:0d:08:d1:31:60:df:c3:65:43:ca:9f:b3:
         15:29:be:17:ed:2a:98:0f:0c:d7:bd:11:47:29:ce:01:8f:34:
         06:9d:1c:53:f1:2f:ab:6a:60:49:de:83:8f:61:a2:8a:9a:3b:
         10:c1:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:40 2024 by rpki-client on console-ams.rpki-client.org