Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a464dcae-7530-3e1d-ab66-97a0f4a5a4fb.roa
File:                     a464dcae-7530-3e1d-ab66-97a0f4a5a4fb.roa (raw, json)
Hash identifier:          DL8SdGNgwuIJdayaYfhkdelfMYn7vkM53ZhHb5MbpdI=
Subject key identifier:   FA:1E:88:ED:59:8C:34:80:96:89:3F:9C:46:4A:7F:41:4B:85:A4:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933BD4047A3FCD5E5872600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a464dcae-7530-3e1d-ab66-97a0f4a5a4fb.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     18865
IP address blocks:        216.218.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:bd:40:47:a3:fc:d5:e5:87:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=0cbe0c33-6682-4067-8713-685c6abce98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:6e:64:aa:d5:61:a3:91:fc:45:be:d8:4a:
                    7c:e9:1b:49:42:9d:16:ed:be:0a:56:28:a0:d0:37:
                    21:84:b3:06:86:df:33:60:a2:96:0b:c0:fe:d1:bd:
                    32:cd:b7:ed:ec:34:da:b9:ad:db:17:09:8e:b1:75:
                    bc:ad:16:22:0d:da:02:06:17:42:dd:78:e5:75:92:
                    26:61:b0:bb:89:92:80:a5:d6:ca:aa:c5:a1:05:8c:
                    39:02:c5:b9:e6:ca:a4:5f:40:f6:32:0c:09:3a:7f:
                    ca:92:a3:e9:6c:c9:ae:16:c4:b0:2c:81:a9:a2:26:
                    fb:8d:1c:c4:b5:11:3f:1e:b4:18:42:29:85:02:fd:
                    1e:34:00:cc:22:7b:25:de:51:90:bb:d4:5a:ba:b8:
                    5a:55:7a:04:5d:79:fd:0a:1e:ba:63:9b:02:f9:1d:
                    55:4b:0f:f3:d2:d3:47:27:b5:d8:44:c1:51:ec:3b:
                    46:bc:16:88:7c:1e:ff:73:dc:5e:d2:41:fd:f6:37:
                    df:b4:6e:f5:a0:a0:87:80:cb:76:64:38:c9:38:93:
                    e9:fe:e4:72:f1:64:e7:48:c8:13:2e:3e:c0:42:65:
                    0c:c6:fe:fe:f0:c4:e6:3b:be:48:83:52:8a:ec:8c:
                    78:50:6e:83:a8:b9:00:2c:18:49:13:d9:d5:d5:bd:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1E:88:ED:59:8C:34:80:96:89:3F:9C:46:4A:7F:41:4B:85:A4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a464dcae-7530-3e1d-ab66-97a0f4a5a4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:d3:bd:65:f3:9f:55:9f:b9:ef:b5:7e:c8:0e:d7:ab:f6:
         a8:05:a2:e6:49:ed:d3:78:1e:04:45:cc:4c:41:29:1a:b9:5a:
         f9:43:5e:a8:7b:26:90:7f:5a:45:6b:c2:1f:b3:05:a7:4c:1d:
         4a:69:e5:be:5d:e3:45:7d:25:66:19:be:79:72:7c:71:c2:25:
         ae:bc:14:43:82:93:48:9a:36:46:17:de:10:90:d6:9f:0d:d5:
         32:42:4a:e3:bd:63:a6:2a:5e:b8:1d:18:c2:4f:b5:f2:39:d3:
         ed:cb:55:04:ca:38:1d:9f:4c:05:e8:a2:04:99:12:6d:33:fc:
         b0:b6:8c:eb:27:44:02:96:e7:ac:51:53:5c:39:8c:1c:98:23:
         15:26:fb:28:6e:5f:e6:40:52:bd:e2:cb:ba:18:9c:cd:9f:0c:
         5e:f4:26:aa:54:70:94:2a:33:d8:04:9d:21:f7:e5:8d:b4:ea:
         eb:8e:35:20:22:d2:20:21:a4:9e:c6:87:41:c4:68:00:f2:11:
         c8:e1:04:8e:da:4d:91:ed:48:d6:7e:74:c4:6e:88:62:f2:c3:
         1d:c1:0a:9e:34:22:15:f8:77:f1:cf:71:c3:95:04:68:6c:26:
         c4:ae:85:92:ba:d3:ab:b6:44:4e:86:8a:d1:b8:0b:4d:00:2d:
         29:a7:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:46 2024 by rpki-client on console-fra.rpki-client.org