Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ba695cb-19b1-3e0a-baa2-626b36b0ba2a.roa
File:                     4ba695cb-19b1-3e0a-baa2-626b36b0ba2a.roa (raw, json)
Hash identifier:          J2UrxfVCkDqpm3MBt3YHsbYnWbP495Lind8t/ulIhLI=
Subject key identifier:   4F:61:5D:85:1F:99:D3:03:62:86:A5:FD:4E:09:69:02:3F:87:F5:AC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B123F4E5F95B01498E69E58
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ba695cb-19b1-3e0a-baa2-626b36b0ba2a.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        216.208.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:3f:4e:5f:95:b0:14:98:e6:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3e470e79-207f-4a1b-a1b0-a62989e36873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:27:ca:10:69:e0:23:1a:9f:6b:63:42:90:
                    4b:f3:f0:7b:78:5d:99:c5:87:2c:3a:2c:66:f0:4a:
                    16:4e:a4:20:84:5f:f6:75:fa:90:5b:aa:72:64:1d:
                    40:21:8e:d4:2c:91:e6:a9:d8:cc:10:38:f2:14:09:
                    a9:10:44:5f:02:bd:2f:cd:38:bc:54:cb:31:8b:28:
                    73:d6:91:21:d4:57:9b:65:c5:f2:3a:4d:5e:37:31:
                    28:1a:29:62:e4:1c:58:a8:f9:a4:ea:a2:c6:0d:79:
                    46:14:64:0a:1b:5c:4b:58:74:f8:ff:61:51:1b:44:
                    50:0e:ef:22:5a:49:d7:25:57:d3:ae:d8:f4:ea:65:
                    f6:2d:04:4e:6b:b9:2e:c5:d3:e1:75:a3:d7:b7:72:
                    fb:7c:79:a7:17:c8:aa:fa:4e:51:22:0e:f2:9e:8f:
                    81:1c:30:9e:cd:cd:ac:35:83:1f:0e:17:d3:de:2e:
                    88:64:58:09:78:82:74:57:7b:a7:cd:2a:28:c7:45:
                    f0:7a:05:18:4d:21:69:e1:7a:0c:e0:f6:81:bc:a1:
                    85:82:37:06:4d:27:ce:1c:fd:84:e1:ec:0d:14:ce:
                    7d:21:3a:7b:1b:d3:b8:c5:9f:2c:a2:fe:0f:c1:d6:
                    3b:c9:62:e1:59:e0:2e:3d:da:e8:9a:90:ca:06:8f:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:5D:85:1F:99:D3:03:62:86:A5:FD:4E:09:69:02:3F:87:F5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ba695cb-19b1-3e0a-baa2-626b36b0ba2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:de:ff:69:52:d7:26:74:27:4d:ad:8c:44:d6:b8:a1:c9:67:
         a8:34:91:ba:65:d9:5a:44:8c:bb:e3:2d:62:ca:39:2e:ac:22:
         80:d2:67:da:de:9e:77:75:bc:cc:da:d5:6b:f2:ef:df:df:46:
         3b:5d:d2:18:00:5c:1e:74:19:b4:40:84:16:8e:ec:e4:32:28:
         a2:75:23:33:95:eb:76:76:08:7a:f8:e1:6f:ed:76:1f:68:80:
         2e:76:5d:63:e1:9c:2d:e4:7b:dc:38:e7:89:ba:bf:c0:15:4a:
         eb:c8:e5:ef:5f:56:d9:a4:27:b1:ff:0c:f5:8f:14:ea:20:a0:
         22:9d:b6:f5:6b:2f:6c:17:2c:6b:16:a0:59:fa:36:ec:61:9b:
         e7:60:f8:94:a2:b9:5b:f0:0d:d4:c6:bc:37:1f:e0:0c:40:ca:
         6a:c5:1f:fc:f4:65:61:3c:83:78:de:04:2f:9c:5c:49:0a:8e:
         af:35:6f:ae:be:ef:11:58:db:ee:c2:ff:b1:f0:4b:29:9f:1c:
         8a:3c:d4:a8:f9:e7:cf:80:9f:c3:6e:25:9e:3f:d1:a5:42:54:
         6e:d8:cf:08:8d:db:79:ec:d4:db:b1:9d:dd:b0:e8:a9:a1:4a:
         b5:05:89:48:81:7a:44:4f:20:83:6d:ed:3c:4d:3f:86:23:33:
         38:aa:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org