Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa
File:                     943d4eb9-d91c-3916-9895-0d168e871044.roa (raw, json)
Hash identifier:          1uXVlA5oQqBLcbW7I4Tv7e8oyMJxkQKH2qssZjW8P2I=
Subject key identifier:   BA:BE:20:5D:4D:36:5E:D3:9D:F9:B8:D7:5D:17:FD:0A:43:8B:93:48
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F463C58D00A5FA5FCD95080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa
Signing time:             Fri 29 Mar 2024 20:49:23 +0000
ROA not before:           Fri 29 Mar 2024 20:49:23 +0000
ROA not after:            Thu 27 Jun 2024 20:49:23 +0000
asID:                     15169
IP address blocks:        108.177.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:46:3c:58:d0:0a:5f:a5:fc:d9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 20:49:23 2024 GMT
            Not After : Jun 27 20:49:23 2024 GMT
        Subject: CN=aa7583de-ea78-4674-abe4-8de2166de934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:c7:b9:de:2a:eb:c4:06:9e:95:8d:64:4c:
                    a3:92:d3:04:dc:4a:d8:c8:3a:62:93:9f:2c:7b:bf:
                    9d:34:20:b5:e4:63:3d:89:b5:0c:1b:4e:dc:58:7b:
                    8e:a9:0e:20:88:63:d3:87:73:31:a4:7b:1f:42:a4:
                    75:94:be:b7:5e:da:69:fa:bd:c2:10:83:ba:4d:57:
                    34:5c:d4:98:a7:de:f8:b0:07:ea:39:74:22:21:e1:
                    38:b4:9d:89:2f:1b:d8:b6:20:45:aa:ca:28:43:8a:
                    75:e1:41:24:69:73:56:7c:dc:9e:93:84:38:ce:11:
                    84:59:63:94:5b:e4:e9:b2:08:58:c0:91:13:28:42:
                    4d:87:2d:b5:3d:69:9d:63:8f:80:98:26:cc:94:a6:
                    e8:2e:ff:63:3f:32:d3:47:22:c3:13:bd:5d:ca:2f:
                    46:44:7b:f5:df:ae:31:7c:57:1f:8f:1d:46:48:36:
                    a3:6b:28:6a:ba:f9:7b:cc:91:d8:07:db:c6:be:cd:
                    af:f6:cf:47:59:64:49:bb:1c:37:35:c8:20:7b:fe:
                    ec:94:0e:bd:87:65:31:b4:4b:a9:98:67:44:b3:e5:
                    fd:f8:96:c9:63:cb:ae:1f:94:46:19:fd:ce:db:20:
                    95:64:7a:bf:bb:e9:1b:ef:1a:ec:c8:84:37:b0:7c:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BE:20:5D:4D:36:5E:D3:9D:F9:B8:D7:5D:17:FD:0A:43:8B:93:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:10:ec:08:10:5c:e9:7b:92:7a:48:4b:0d:d4:33:b6:58:58:
         e1:55:7f:81:74:1a:b9:64:48:0e:07:ca:7f:47:50:9b:6c:b9:
         9c:49:de:8f:a2:61:73:0e:66:a0:0b:09:fc:f2:8e:4f:f4:99:
         87:ec:e3:10:4c:de:45:ef:4a:a7:44:4c:99:8a:f3:15:1f:a9:
         f7:3d:6e:56:36:a6:3b:07:3b:b4:77:d8:67:ee:13:d8:ef:d7:
         64:d5:9b:c4:6d:0d:8e:b1:7e:1e:45:f0:12:ab:0b:69:99:49:
         34:63:91:48:cc:fa:92:1e:68:d2:f3:d3:70:0e:02:87:79:64:
         56:ba:9d:a6:bd:fe:f3:60:69:62:54:99:3c:17:44:e6:15:97:
         fe:af:45:19:c5:ac:26:43:44:b2:0c:1a:3c:85:9a:3a:2e:f5:
         1f:9f:36:91:93:ac:13:51:7e:fa:43:d8:92:0c:2c:cd:df:98:
         d8:f2:6d:43:b3:f2:9f:9a:eb:bc:9a:ad:0f:7b:a6:86:7c:96:
         99:4e:bd:79:93:ef:8f:d3:be:33:31:d1:b9:81:26:b3:00:ba:
         d0:e6:f7:c9:98:fb:8c:0a:4a:fa:fc:f7:11:67:28:6d:cc:1a:
         d7:83:0d:dd:dd:a3:08:ce:39:da:ea:72:59:58:5c:f0:65:16:
         99:91:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:26 2024 by rpki-client on console-ams.rpki-client.org