Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/253160b7-8c57-33e2-ada5-78e50ee630f4.roa
File:                     253160b7-8c57-33e2-ada5-78e50ee630f4.roa (raw, json)
Hash identifier:          4N2jMdj51X2HqPk7TgfDaQykvGLwUaxmPnzJlimrTtU=
Subject key identifier:   79:B5:BE:EB:54:00:B2:27:5F:7B:AF:AA:5E:7A:31:88:E5:EC:4A:82
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5E542BF41FF8A0420E880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/253160b7-8c57-33e2-ada5-78e50ee630f4.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:e5:42:bf:41:ff:8a:04:20:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=b274c890-2a8f-4d5e-9e2e-8eec92f09754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:e3:63:b8:68:a1:e8:f5:b8:ee:d1:d3:57:
                    66:e1:d5:3f:e5:17:a1:d4:bc:40:3f:46:2d:cb:19:
                    56:3e:8a:03:02:53:91:c4:0e:46:14:3b:6c:57:9c:
                    9d:47:c2:b6:4d:53:18:60:f4:4b:0b:10:7c:db:4e:
                    0b:42:0d:9a:15:14:28:84:76:a0:a3:ba:db:c3:61:
                    6a:62:d3:de:21:60:c2:57:b5:0f:7e:91:f2:de:84:
                    e5:20:a7:30:79:26:03:c7:e0:ec:f0:b8:90:ff:3a:
                    38:e8:95:d0:f1:df:4a:69:02:0e:bb:7c:3a:22:b6:
                    e5:6e:88:a0:f9:6a:e7:d8:f5:26:a1:95:7e:dd:be:
                    5e:7b:76:92:eb:17:51:fb:ed:f5:9d:19:61:e7:14:
                    bc:52:a4:46:38:d8:1d:43:5b:05:0b:17:cf:87:05:
                    3e:4c:87:fb:9d:93:b1:99:30:a8:52:bb:0b:de:61:
                    10:1e:ee:5c:08:0b:1e:0e:95:91:a0:b2:2a:09:e8:
                    8b:ee:c0:0b:ed:55:ac:c8:31:43:8c:43:e4:47:ed:
                    56:64:47:d1:f2:84:89:09:f0:5e:5e:04:08:e7:02:
                    f2:0e:0d:b8:35:fb:0f:c8:ad:15:5d:2d:73:60:37:
                    4d:ba:98:6b:17:eb:6e:06:9f:93:9d:68:a3:52:91:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:BE:EB:54:00:B2:27:5F:7B:AF:AA:5E:7A:31:88:E5:EC:4A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/253160b7-8c57-33e2-ada5-78e50ee630f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:cd:88:3c:ee:a8:96:34:82:73:bc:a2:8c:f3:2c:a0:08:
         dc:30:98:92:2a:fa:bf:ed:82:00:7d:7e:55:66:e3:c0:22:67:
         98:44:6e:ad:9b:fd:af:34:1f:c2:b3:fa:bb:91:6c:7d:98:a5:
         d7:cd:4e:97:36:8b:83:02:be:ae:0c:b8:2f:a8:ff:79:8f:f7:
         2e:90:6d:bd:04:1b:00:06:a4:e2:ee:b4:3e:d1:9b:42:f8:ed:
         d9:dd:c4:28:2e:ca:ca:84:dd:c3:8a:63:25:65:09:14:75:13:
         35:a0:16:a8:ad:13:9f:b9:2c:55:b1:06:5e:42:ad:4d:70:ac:
         b1:cd:84:5e:3d:86:10:03:01:04:2d:2d:44:8e:43:17:71:14:
         c8:3a:3a:41:47:39:32:5c:8a:ff:d7:cc:e1:e3:34:aa:24:4b:
         86:a9:54:15:5f:d5:bd:5d:08:c9:ac:72:9f:0d:06:21:83:ca:
         d5:23:da:f3:fc:26:4a:48:62:10:73:50:7a:c3:60:ed:4b:d7:
         29:95:3f:0e:31:d2:75:0d:93:26:44:c6:6e:7c:cd:8e:6f:22:
         cb:95:6e:23:0d:2e:3f:ea:8b:aa:9d:44:6a:34:d3:32:af:32:
         84:8f:4a:7d:3d:09:9f:13:18:fe:24:1c:77:32:a2:e4:95:d7:
         de:a5:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:18 2024 by rpki-client on console-ams.rpki-client.org