Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa
File:                     2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa (raw, json)
Hash identifier:          MrTqW5R2pYqBpJZTB7VF+ELUEJYhjr5P1KqatVlwXNM=
Subject key identifier:   43:DA:27:8F:5B:3E:A0:6E:35:3A:EF:CE:CB:5C:05:09:05:C4:DB:63
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584523DAF5429CB8B98F92A36500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        136.226.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f5:42:9c:b8:b9:8f:92:a3:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=a8bf9cce-dfc8-4ce0-9a87-ff0a09303234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:f5:df:fe:20:fb:70:ed:8d:05:39:b4:69:
                    5e:b5:66:df:08:7b:c4:ed:2a:94:f1:ed:a6:91:fb:
                    20:a3:35:8f:10:54:55:bb:7e:68:fc:b2:ca:67:e0:
                    91:4c:a7:de:b3:96:2f:37:9e:33:0d:73:1e:02:01:
                    45:1a:ec:fc:cd:d7:fc:81:4b:80:ec:c7:25:67:23:
                    15:50:c3:bf:1a:3d:4d:c2:99:0b:36:2b:17:14:c9:
                    ed:3a:79:01:8c:9c:f7:3f:03:8a:07:86:2b:df:56:
                    b6:17:dd:11:7d:4d:03:91:cd:2c:68:42:6a:63:a9:
                    c8:5a:d9:f7:84:26:4a:18:ea:f1:e2:8c:50:b8:e8:
                    9d:09:13:43:d4:7d:46:60:4d:3f:b2:4a:cb:73:33:
                    a6:ca:e7:d7:bf:61:11:6b:7c:42:e9:49:5f:42:3b:
                    ca:35:0b:d4:d0:90:8d:29:c3:f2:f4:55:20:f8:81:
                    16:f8:cd:49:2c:1d:97:52:00:08:c0:b5:4b:d7:9c:
                    22:cd:1a:8f:64:b0:9a:1f:5e:77:a9:fe:7b:08:0f:
                    05:d1:24:44:30:1d:03:8a:48:c7:1a:73:e6:5c:97:
                    14:49:1b:af:4e:6e:d9:bb:0e:e4:ea:a0:12:ea:dd:
                    bb:d5:2f:22:68:17:27:85:fe:c0:17:a5:6a:c7:ee:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:27:8F:5B:3E:A0:6E:35:3A:EF:CE:CB:5C:05:09:05:C4:DB:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:d7:d0:7e:37:7e:fd:e8:26:9b:3d:86:ba:b9:3a:5a:bb:
         ff:e3:89:b5:a3:f0:33:4f:5d:f9:ab:32:1f:24:9f:02:25:6c:
         e8:7d:bd:d8:18:88:db:e4:24:06:a8:0c:23:c4:a7:08:51:4a:
         2d:bf:ad:29:b4:03:85:82:b9:c4:ee:71:e7:b1:e1:a9:1d:6d:
         06:6e:fb:be:08:c3:e3:ad:50:7b:d4:cd:aa:2f:ca:e1:49:86:
         fb:52:0a:de:bb:45:4c:55:85:ba:ee:19:98:30:32:cb:bd:7b:
         51:26:6c:70:2a:7f:54:f4:78:c2:4f:d4:0e:8d:0a:f4:cd:26:
         00:dc:83:50:74:8c:7b:08:fa:b0:ab:1a:d7:27:05:02:22:7f:
         69:bf:20:fe:27:e9:2c:84:de:7a:4e:f2:81:3e:42:37:55:00:
         9c:a1:8f:4e:c9:0a:c4:37:69:92:a4:a4:71:12:10:f3:61:4b:
         71:fc:0a:80:f1:36:98:89:a5:45:97:13:d0:32:a6:f1:b0:66:
         d4:d3:2d:6c:2e:2e:4f:92:bf:98:8b:5e:dc:a4:d3:c0:97:a4:
         12:87:b7:da:d2:28:10:68:24:4f:82:2a:82:7d:8f:92:3f:10:
         35:c0:4d:e7:06:ab:a6:72:86:8b:bd:cc:57:db:28:6f:41:e4:
         39:74:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:56:50 2024 by rpki-client on console-ams.rpki-client.org