Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9c07b15-4feb-3679-af87-c3df82eb3d90.roa
File:                     f9c07b15-4feb-3679-af87-c3df82eb3d90.roa (raw, json)
Hash identifier:          mJFNAf6qOzQoTB8PS0zOHzuJsb34TT+57hxhFdtG9kc=
Subject key identifier:   15:DC:42:0A:0B:36:FF:F6:2F:D3:B3:CC:C2:9F:D4:60:07:F7:4D:97
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584540B7F44B56E34A08650ED1C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9c07b15-4feb-3679-af87-c3df82eb3d90.roa
Signing time:             Mon 18 Mar 2024 22:08:27 +0000
ROA not before:           Mon 18 Mar 2024 22:08:27 +0000
ROA not after:            Sun 16 Jun 2024 22:08:27 +0000
asID:                     396982
IP address blocks:        108.170.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:f4:4b:56:e3:4a:08:65:0e:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 18 22:08:27 2024 GMT
            Not After : Jun 16 22:08:27 2024 GMT
        Subject: CN=8f494cc9-dee5-44d6-a2f7-771c30491997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:27:20:60:d7:8e:df:e7:6c:8f:f4:4c:e8:
                    39:7a:ab:ff:4f:28:2c:2d:6b:ba:07:75:80:13:5f:
                    3a:90:e5:da:a4:34:b6:49:31:da:c9:0a:a7:88:86:
                    6f:31:3d:b2:3c:ba:4b:ed:d1:b1:c7:a8:d2:52:f0:
                    e3:43:da:94:c0:38:20:33:2c:d7:c6:2b:4f:87:07:
                    f1:1a:39:f8:55:37:5d:a8:0a:f8:c5:7a:64:d5:aa:
                    b7:cc:c8:2e:28:fb:6e:de:a0:f0:39:ac:1a:f0:45:
                    9c:a8:9c:f8:45:19:8a:0d:3b:e2:e0:2a:26:b8:7a:
                    8c:58:ce:2d:0b:e9:66:a0:c9:2d:fd:c9:7c:f3:7d:
                    d0:01:bc:e6:24:3f:b6:cd:62:a1:fe:03:57:7f:f3:
                    38:27:eb:13:43:13:cf:20:50:e1:2f:46:ad:4d:17:
                    b1:34:0a:e2:c0:7b:44:28:48:d2:b5:3e:96:47:10:
                    d6:9f:13:01:86:a3:d8:00:5c:4a:03:93:9b:f4:89:
                    7e:50:35:af:27:9b:ab:0c:60:ff:00:de:c7:d7:96:
                    1b:bf:15:db:d8:8b:98:2b:59:72:91:62:98:b7:fb:
                    c7:9f:48:8f:7f:bc:56:b0:b8:de:7f:e1:59:4c:98:
                    af:c3:07:c5:e7:21:ef:d1:bf:e2:3e:2f:bb:79:f1:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:42:0A:0B:36:FF:F6:2F:D3:B3:CC:C2:9F:D4:60:07:F7:4D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9c07b15-4feb-3679-af87-c3df82eb3d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:9d:27:0a:6a:03:e9:3b:d1:de:9e:97:28:b6:8e:f9:b3:
         fd:a0:b0:51:d3:73:6e:dd:fe:46:2e:b9:cd:d8:67:d6:d7:23:
         39:d2:ef:8b:85:d1:5b:53:c3:2b:e3:6b:e9:56:e5:34:0e:57:
         75:36:89:0d:75:ff:48:50:4f:a5:5e:45:7f:20:2f:cf:f4:a8:
         95:26:bb:a0:9c:9a:00:73:e3:dd:14:02:36:2d:7f:9e:fa:0b:
         ea:8b:48:d3:5c:73:72:d5:97:d1:10:b5:b7:b0:43:bb:12:ea:
         35:cb:eb:06:3d:cf:78:89:f9:54:64:d4:78:9c:e5:62:ca:ee:
         f4:d5:25:7a:c4:5b:86:b4:65:98:43:e1:9a:5f:bd:79:63:61:
         bf:b6:44:e2:e7:ae:99:d1:19:47:71:7b:d0:e0:09:51:3d:f4:
         db:83:ca:9e:d4:80:36:fb:b5:28:9b:55:83:ed:8c:e0:98:52:
         83:44:da:61:2b:27:34:04:2d:57:7a:cb:8b:e5:5f:c8:af:2e:
         69:8a:64:7b:e5:4d:05:98:e0:12:9b:de:48:a6:ea:45:11:c5:
         a5:d7:2f:3a:66:34:43:19:57:a1:55:59:25:3c:81:a6:1f:f9:
         ea:89:3c:8c:a3:57:bb:dd:09:d4:7d:db:bf:f0:ca:a1:1e:55:
         66:60:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:39:09 2024 by rpki-client on console-ams.rpki-client.org