Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa
File:                     f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa (raw, json)
Hash identifier:          loQ3qlBOoltbU57uhOoS/bKWXZR2TBOPxJwtqbPcQU0=
Subject key identifier:   CE:9D:96:1C:0F:02:42:B5:A7:51:6E:18:09:C2:64:90:D9:9E:58:3D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462B946F4512E837B27E08E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa
Signing time:             Wed 20 Mar 2024 21:00:28 +0000
ROA not before:           Wed 20 Mar 2024 21:00:28 +0000
ROA not after:            Tue 18 Jun 2024 21:00:28 +0000
asID:                     15169
IP address blocks:        216.58.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:94:6f:45:12:e8:37:b2:7e:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:00:28 2024 GMT
            Not After : Jun 18 21:00:28 2024 GMT
        Subject: CN=6a388c74-677b-49f0-a1bd-79f231b97944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:19:3e:ab:7d:59:76:14:3a:da:8c:e9:4a:
                    82:30:76:cf:72:ef:e8:55:94:1d:67:57:08:75:25:
                    ed:cb:3e:ce:61:eb:b6:e8:9b:e4:f4:08:11:5b:1c:
                    96:2b:30:a0:98:73:91:78:9e:19:b4:03:e6:1e:8c:
                    49:c9:f9:36:14:a4:a1:b4:98:92:0f:3a:4c:e9:8e:
                    30:fd:b8:cd:3c:99:33:b5:d1:ac:ac:18:5d:04:20:
                    00:a6:46:e7:e1:23:22:d5:4d:aa:2e:ec:fc:86:0a:
                    f5:f6:be:63:0d:9f:e1:e9:69:c8:83:9c:82:8f:d0:
                    66:ff:32:9a:e7:bd:d9:e3:10:d4:de:21:0f:0d:c5:
                    7f:e4:01:c9:c0:5a:02:26:16:0d:b0:30:b6:c1:55:
                    05:6e:19:12:ee:bd:d3:65:49:8a:d7:79:39:64:50:
                    86:e2:d4:e1:76:dd:fb:bf:71:d9:3a:5f:df:0d:24:
                    3b:45:41:a0:f1:18:f5:c5:99:47:90:ac:37:df:16:
                    5e:cd:cc:2d:fc:81:bd:81:0b:dc:97:79:fb:87:04:
                    25:b0:3c:c3:88:48:6f:79:6d:81:f3:0f:7c:a8:5e:
                    a1:10:34:a4:07:38:95:89:5c:ee:e1:1b:97:15:75:
                    fd:42:3c:6e:2c:c4:6f:da:6b:fc:a5:37:c1:7a:29:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:96:1C:0F:02:42:B5:A7:51:6E:18:09:C2:64:90:D9:9E:58:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:38:c3:55:95:2c:f4:92:6c:62:ee:8d:96:5f:9c:3f:fc:
         f3:f0:06:20:b2:ee:1e:f6:9e:67:b0:b1:c0:1f:49:32:cd:5a:
         7b:e2:ec:41:dc:82:62:f2:8d:cd:47:f2:5c:c9:5e:84:34:e0:
         a2:0a:60:e2:77:81:aa:50:dc:ce:13:14:a1:fd:c6:62:ef:e2:
         c5:6b:5d:06:7a:f0:de:0a:c8:64:b8:a5:91:be:aa:db:78:62:
         02:da:65:72:fa:98:7f:5b:66:40:db:04:d3:59:b0:68:f1:dd:
         e0:9f:91:19:76:57:25:49:36:ae:70:06:a2:3f:77:e4:6e:4a:
         62:3d:ab:45:db:57:07:94:42:7b:53:b1:3a:ea:3b:e7:a3:dc:
         7a:f7:1f:ed:8a:2b:0f:d4:39:50:a9:c7:aa:83:2e:ca:54:4c:
         b4:de:6b:97:7f:ed:af:54:bf:3b:2c:6c:66:81:f3:86:ea:26:
         7f:0f:3f:53:3e:fb:95:53:9f:26:af:bf:9e:6a:7c:83:73:cb:
         44:4c:8b:c1:0f:e1:27:07:da:66:68:c1:58:2b:b3:11:70:ec:
         2d:5b:4e:34:1f:92:49:41:cc:9e:d5:67:5e:d7:4a:58:99:32:
         ec:11:57:1c:7c:fe:b4:ac:57:51:19:73:a9:b8:32:0e:12:33:
         7a:c0:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:47 2024 by rpki-client on console-ams.rpki-client.org