Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
File:                     13c44343-66dc-3339-b6e1-56b2ab520e15.roa (raw, json)
Hash identifier:          ni19WkXm+ZjK4MKiwS4FQofOmFFRqA+DWrClESd85Mw=
Subject key identifier:   16:A3:36:9A:09:3C:CC:81:EB:D5:53:D0:04:B3:F8:E2:3E:F5:94:97
Certificate issuer:       /CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
Certificate serial:       010D0C9F43285844F7300A030EF3759F36B64C00
Authority key identifier: 3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     396982
IP address blocks:        199.201.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:0a:03:0e:f3:75:9f:36:b6:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=903daac7-6a5c-4c8c-adfe-591d03d07aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:48:1a:66:c9:99:35:4d:25:9c:15:62:0d:
                    80:68:c5:5f:d7:c0:09:c5:ac:f0:ff:3b:91:98:f2:
                    35:1a:d9:c4:80:5c:1c:af:67:33:bb:c5:09:3a:d3:
                    51:94:39:db:1e:4e:dd:6c:c2:3b:e3:3b:31:1a:b7:
                    ea:d3:a0:14:e1:54:c6:c2:7a:6f:69:97:ae:d7:37:
                    5e:b2:67:ef:f4:b2:0d:95:7c:80:47:9e:fa:77:77:
                    fd:1c:32:6a:af:48:70:27:b0:2a:22:11:46:79:86:
                    cf:56:bb:c7:88:16:34:04:48:43:39:ee:17:14:6e:
                    32:dd:2b:ba:77:21:4c:48:d4:31:81:55:fc:6d:ad:
                    32:2d:aa:72:b2:a3:a7:0f:5e:e5:0c:01:7d:a0:7f:
                    86:05:e7:79:8a:5b:a9:b3:eb:b2:e2:9b:12:10:98:
                    ca:41:5e:b0:0f:59:07:d8:3c:36:42:5a:35:25:74:
                    f7:bf:b0:e7:e7:cf:22:1a:46:38:40:1f:64:49:16:
                    39:9c:3f:1a:34:b7:cb:d6:19:a8:aa:ce:9f:ce:a7:
                    c5:8f:e5:ec:71:1a:da:71:3b:c9:fa:b6:ac:a3:95:
                    4c:68:da:dc:88:6f:f0:e6:e9:ea:79:ba:62:c6:57:
                    9d:a9:12:ca:6e:e8:93:eb:83:3b:aa:4d:4b:f9:e6:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A3:36:9A:09:3C:CC:81:EB:D5:53:D0:04:B3:F8:E2:3E:F5:94:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:f8:85:18:4a:b3:9d:4c:1b:87:c4:ea:a6:e4:13:3b:44:
         51:8c:57:4e:8b:be:51:53:16:e5:d8:a7:03:27:22:3b:a2:b6:
         e8:a6:8c:2d:69:ba:12:ac:41:ce:c7:12:a4:6e:ab:36:2e:90:
         c9:a3:d0:ee:47:31:54:d9:81:c2:f1:88:45:6d:fc:da:c2:ee:
         0d:cc:2c:6d:eb:fa:5b:69:43:33:79:92:3f:84:c8:09:dd:49:
         da:c0:d6:7e:4d:17:04:38:30:ae:a4:17:01:70:ce:91:b8:9b:
         05:65:40:db:4e:17:31:56:f7:0e:da:56:16:06:d1:38:82:98:
         75:4e:90:20:d5:d0:da:11:2e:21:b1:6c:cb:fb:9e:e9:9e:e4:
         af:11:d4:f3:b8:a7:98:bb:33:84:f7:10:25:ed:56:e9:01:d7:
         4b:60:64:ae:48:5a:b5:26:76:d2:de:9b:24:a1:9f:df:b0:4e:
         f3:b7:b2:ba:55:47:e1:6c:33:8b:39:84:f2:9f:0b:b1:75:51:
         42:7d:73:7d:e6:1f:e0:89:96:b7:a4:3e:62:35:51:99:6d:08:
         ef:82:03:df:6a:ed:11:c8:d7:37:88:c6:63:0d:c3:a1:53:9e:
         34:3e:66:a2:0b:66:d9:d9:d8:a4:96:35:3a:5b:68:63:fd:bb:
         34:74:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:51 2024 by rpki-client on console-ams.rpki-client.org