Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
File:                     ce2757a3-5b67-326d-b200-12e94dccea02.roa (raw, json)
Hash identifier:          h625CMZKShRDewspzV064PQAiQxZivixbb4iKZTOsPw=
Subject key identifier:   69:DB:8C:B7:B6:85:3F:08:16:FD:A4:B7:C9:2D:E6:19:73:74:C0:F8
Certificate issuer:       /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
Certificate serial:       010D0C9F43285844E7D53A56B25E697E974B6B20
Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        162.216.248.0/24 maxlen: 24
                          162.216.252.0/24 maxlen: 24
                          162.216.253.0/24 maxlen: 24
                          162.216.254.0/24 maxlen: 24
                          162.216.255.0/24 maxlen: 24
                          162.216.249.0/24 maxlen: 24
                          162.216.250.0/24 maxlen: 24
                          162.216.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:3a:56:b2:5e:69:7e:97:4b:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=e1a0b4ea-1928-4eb6-bfe2-4f2efabded76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:b9:6e:39:3f:e2:75:be:8b:1d:a5:5c:34:
                    f2:84:34:27:e4:d8:f1:13:a7:17:87:91:1a:a6:75:
                    79:85:9c:8e:8b:13:9b:67:b6:f5:b0:88:43:f1:04:
                    d7:5b:7d:d6:70:ca:9a:55:25:17:2d:72:2a:55:ac:
                    f5:32:65:34:4d:7e:1c:96:b3:58:b4:52:21:88:f1:
                    77:b2:87:fd:2d:a3:c1:32:ab:06:1a:20:8d:20:d0:
                    fb:19:34:e4:1c:fb:db:69:5f:1c:f7:55:f0:e7:dc:
                    42:bd:db:f0:5d:89:17:d2:18:2b:90:b8:17:48:6c:
                    4a:48:3a:08:3c:a5:b5:5b:6e:f5:f0:6c:77:87:8a:
                    ec:74:89:3d:a3:d7:0c:81:4e:c9:db:79:68:b9:dc:
                    1f:37:e9:5a:0b:b4:91:ab:72:3a:b8:c5:87:97:c7:
                    3a:5a:f1:ab:96:63:56:bc:88:43:f2:da:86:f9:83:
                    9a:b7:32:bb:4e:27:e9:77:7d:3a:37:23:d0:4b:0b:
                    83:8e:b5:ef:d7:51:46:3b:35:4f:5d:81:54:75:98:
                    8b:83:e8:36:e2:a8:09:f6:5f:73:9b:7b:71:1e:c6:
                    f9:3e:25:39:39:ce:cc:ad:ac:f9:1b:74:29:94:10:
                    e4:c1:48:09:ef:67:ea:ff:92:be:fa:34:e7:ae:bc:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:8C:B7:B6:85:3F:08:16:FD:A4:B7:C9:2D:E6:19:73:74:C0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:b5:88:28:45:8d:88:42:cb:a5:be:5c:fb:e8:d2:f8:5c:
         66:50:d0:33:b2:1c:bd:7c:b7:e5:11:a0:6f:81:0d:a3:d4:a5:
         fb:e8:de:e7:5f:31:0a:e9:64:43:65:42:95:aa:0d:ff:12:20:
         6d:57:0b:d4:39:ec:cc:50:4b:3c:5d:a8:f6:fa:2b:74:aa:08:
         33:7c:df:84:d0:85:cb:77:7a:b6:c1:ac:a9:e3:9e:07:93:af:
         9a:03:ce:24:c1:f9:ff:82:64:e4:cd:ee:4c:68:ec:6f:de:71:
         94:02:a6:a2:4d:b1:74:4f:25:f1:f9:1d:a5:23:29:9a:33:b3:
         08:54:c8:65:17:7a:03:b5:c8:27:5f:19:15:58:1f:8e:36:fb:
         e4:90:5e:a7:00:78:18:2f:3e:53:c9:1f:09:d8:84:73:58:6b:
         da:6b:9c:8d:d0:be:6b:86:0e:b8:d9:b5:45:e6:a8:44:f1:03:
         a6:c5:85:59:cc:e7:4f:84:3f:16:f9:7f:aa:9b:af:15:21:44:
         60:17:e0:70:d9:9b:06:0c:51:fa:a7:0c:b6:db:19:9c:7e:45:
         07:9e:6a:f3:e5:28:75:67:5e:4b:de:cb:1a:fc:0f:cb:3e:3f:
         c3:a5:2a:23:58:d6:a0:83:a3:f5:b1:1d:11:42:70:e2:23:8b:
         aa:03:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:12 2024 by rpki-client on console-fra.rpki-client.org