Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa
File:                     10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa (raw, json)
Hash identifier:          Vpllyf9ZuBbzndDwge78NoXzxgS8w8+WCOJaPNpXUx0=
Subject key identifier:   73:4E:13:F9:7B:2B:DF:00:2C:13:D6:C6:84:AC:BA:9D:42:6A:9D:0C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584540B9FD66D16FCB2C00504860
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa
Signing time:             Mon 18 Mar 2024 22:12:33 +0000
ROA not before:           Mon 18 Mar 2024 22:12:33 +0000
ROA not after:            Sun 16 Jun 2024 22:12:33 +0000
asID:                     15169
IP address blocks:        108.177.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:fd:66:d1:6f:cb:2c:00:50:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 18 22:12:33 2024 GMT
            Not After : Jun 16 22:12:33 2024 GMT
        Subject: CN=df784a27-9b96-4039-8b93-678354f5a0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:99:72:46:df:80:ea:46:bd:22:3f:10:8b:
                    47:bf:0a:27:6d:59:b2:93:de:27:a4:97:ce:e3:05:
                    58:d0:5a:37:b5:2e:49:83:7b:e9:f2:32:bd:69:9e:
                    c6:6c:5d:3e:fb:5e:5f:8b:53:d8:02:fe:b9:9e:90:
                    95:b5:20:40:5e:b5:af:82:83:9a:fa:e1:c0:7d:45:
                    8d:32:87:13:4d:6c:3a:1a:4b:3d:22:01:46:bb:e5:
                    e6:88:34:7c:16:b2:19:a8:39:77:13:85:cd:3a:11:
                    47:9c:6d:f5:ae:75:d8:ee:b1:86:bb:2d:43:47:2c:
                    5e:a3:47:50:ad:eb:5a:89:1a:e9:51:8c:51:0e:af:
                    9b:a7:06:4b:3b:df:16:76:52:7c:c2:63:5d:71:d2:
                    2b:b5:61:9d:b1:20:97:2f:dc:04:e3:1e:30:85:df:
                    86:c2:dd:d4:fd:77:80:26:be:0d:3a:7b:10:52:99:
                    e1:08:97:3f:d1:86:5d:51:8e:eb:6e:c8:82:3e:ab:
                    82:c4:b9:2f:2e:52:59:82:fd:53:96:2c:18:f0:70:
                    d0:65:8b:65:5f:33:47:67:85:4b:8b:13:25:95:54:
                    b3:c7:43:29:e5:54:22:56:b3:ea:22:f5:58:9a:77:
                    06:59:8f:5f:4d:fa:21:05:b3:b7:58:1f:9a:57:43:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:13:F9:7B:2B:DF:00:2C:13:D6:C6:84:AC:BA:9D:42:6A:9D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:00:61:83:d8:58:da:12:40:09:e2:2f:fe:13:ec:2d:6a:f7:
         9a:e1:da:ee:57:1a:0c:67:60:35:c6:bb:24:e4:99:8c:26:e8:
         c1:b8:b0:8b:c8:18:3e:70:a5:15:9a:90:49:8a:98:f6:d6:d5:
         17:b9:c1:43:78:b6:0a:ba:50:60:69:6b:2f:36:9e:c3:7f:93:
         7e:51:68:92:db:52:cf:b5:10:35:2a:6b:bc:f1:ed:b8:fd:db:
         03:6c:03:94:07:ea:f4:b7:83:a0:27:88:e7:2b:f0:79:a9:16:
         3a:eb:cd:02:0d:43:67:6a:a3:69:cc:b5:c0:cd:d2:d0:98:54:
         bd:1d:87:a2:e6:00:10:b8:b6:46:bc:96:90:2a:38:ed:2a:86:
         7f:44:11:44:a8:64:f3:c5:97:17:d0:3b:48:70:eb:fb:e1:74:
         a3:72:44:65:e1:18:95:1d:2e:7a:b1:cf:2c:f9:b9:ae:4a:f3:
         3c:aa:5f:b4:e9:64:b3:b3:2b:d5:7b:9a:94:e9:fa:b2:6e:99:
         5c:89:b3:26:73:80:64:44:d2:bf:77:3e:7a:ae:d4:92:cc:2b:
         09:6a:5a:36:4f:b6:1a:8b:8b:02:87:04:89:9a:e3:ac:14:e6:
         a5:27:23:02:cf:b6:b8:e0:a7:e9:58:2e:7c:ac:58:cd:f2:77:
         04:67:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:17:00 2024 by rpki-client on console-fra.rpki-client.org