Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa
File:                     d5c5e304-938b-3145-b72c-bc916e50e0c5.roa (raw, json)
Hash identifier:          u1OPmEQk5h1OvMmQASAgtuQnw7O5K00kEgTtT+3CFzs=
Subject key identifier:   9D:9F:68:ED:E1:43:14:F1:44:C0:23:D6:14:1E:F3:18:BD:42:1E:FC
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F432858472C65DFE7C12637C87DC85900
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     397666
IP address blocks:        167.253.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:df:e7:c1:26:37:c8:7d:c8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=96559855-81c9-4c37-8360-8a8819754c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:e1:08:17:1e:f5:82:6d:25:85:6f:bf:70:
                    3b:fa:a2:80:ae:04:3c:ac:65:ac:62:e6:2e:c7:a5:
                    e5:08:88:c0:2e:36:24:b2:fe:41:36:38:9b:bb:4a:
                    02:c7:3f:91:8f:1d:8d:82:54:51:dd:13:28:6e:11:
                    f0:6a:e5:d4:fb:f0:47:6d:6e:44:88:86:66:98:69:
                    e9:90:d9:8d:18:b9:0e:38:64:39:d2:a7:ba:f0:b5:
                    1b:f9:db:7c:3a:2c:1b:f0:8c:51:89:61:9e:86:45:
                    69:b1:0b:22:7d:8d:1c:d2:bd:c9:39:e7:84:01:b8:
                    dc:36:58:a0:bb:a5:f8:a9:c1:fc:c9:81:4a:43:b4:
                    ec:1b:d5:b6:00:8d:37:8d:70:fb:8b:9f:12:04:ff:
                    81:81:7b:9f:4c:38:b4:f9:93:42:e8:fb:f9:fc:8b:
                    b7:b1:11:7a:1b:df:55:62:67:56:37:de:c5:40:d8:
                    20:2a:72:37:94:7f:69:c0:cd:23:a4:80:b6:26:ce:
                    20:fd:09:57:27:8f:7d:51:df:54:fd:73:6b:8b:a4:
                    ca:5a:4a:21:ad:10:59:f6:16:b4:78:27:e5:55:51:
                    cd:51:80:37:bf:84:a5:be:e1:eb:db:a0:23:87:be:
                    66:be:b8:89:0e:02:f8:c9:4f:e2:7c:3a:42:45:b3:
                    ef:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9F:68:ED:E1:43:14:F1:44:C0:23:D6:14:1E:F3:18:BD:42:1E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d1:e4:51:b5:15:3d:a1:9b:b3:46:da:52:1a:1a:b2:5c:75:
         ea:d3:b7:0c:ff:32:47:03:8f:87:e6:f0:bb:fb:83:f3:4f:6f:
         b5:0a:65:d9:57:19:df:bc:72:53:af:84:69:d9:31:d3:07:41:
         b9:5a:2a:f5:0d:b6:a1:35:3d:88:72:a6:73:bb:69:9e:31:be:
         cf:2a:4e:d1:54:bf:ab:81:32:77:72:f2:ef:e4:55:3f:e2:2c:
         ec:d3:4b:8c:7b:be:01:8a:40:18:9e:9b:b8:6d:a8:29:44:00:
         6a:3d:a5:93:d1:11:76:2b:7b:56:9c:b3:8d:ac:3b:29:70:ee:
         4a:63:4e:db:0d:70:e2:01:c9:6f:54:9e:02:99:71:09:8b:30:
         08:9b:4f:6c:20:f2:c9:32:06:66:43:84:80:9e:59:d4:f4:57:
         22:38:b9:33:c6:12:13:d1:7f:ba:c6:54:16:81:50:be:82:89:
         7b:12:e6:82:2d:d2:cb:62:52:0d:a0:d7:49:ba:52:17:3a:69:
         5a:9b:41:0b:05:15:e3:39:30:14:00:aa:6f:51:ef:09:72:f4:
         6d:95:35:4f:a4:52:af:ef:c2:0c:06:cd:e7:78:c8:98:37:e1:
         bc:5d:02:6d:f5:14:88:a1:cb:96:35:4c:70:54:5f:b9:df:b1:
         6b:70:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:36 2024 by rpki-client on console-fra.rpki-client.org