Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa
File:                     5f538c17-1400-3f27-809c-12dd726dc36b.roa (raw, json)
Hash identifier:          Ilfj+8aymaFrrLsONL78hYQTucwF3Jfyqht7U/mxvWU=
Subject key identifier:   A7:42:55:8C:81:67:C7:57:F7:A8:D4:96:46:EC:EA:4B:83:3A:82:85
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858458DD34E4C1CCAE9ECA49B0780
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     209
IP address blocks:        192.216.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4e:4c:1c:ca:e9:ec:a4:9b:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=5522d939-3b30-4108-a0f2-4b228574ec2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:a5:43:24:a2:81:56:65:22:c2:ed:bd:e5:
                    c5:f0:13:17:a4:66:1e:38:45:3e:86:a3:aa:a4:9b:
                    41:3b:46:b1:62:24:f6:a7:77:27:83:76:a4:b6:30:
                    ed:47:09:a6:2e:5e:dc:e6:f8:2c:fa:da:bd:dc:64:
                    8f:71:e2:e7:f1:ff:f7:13:00:ee:41:23:2b:ca:5a:
                    58:c7:e9:3a:59:aa:4b:1c:20:98:3b:d9:97:63:de:
                    8e:52:90:31:74:eb:a1:70:5e:7f:3b:bf:e3:c8:a2:
                    3d:4c:d1:4c:bd:b4:3f:7d:89:43:d2:e2:c9:8f:c7:
                    a7:e5:9b:72:8c:96:95:7d:c6:9c:59:a4:8a:dc:e4:
                    66:b3:95:45:64:85:0d:70:76:a8:93:b5:ca:7b:88:
                    b7:4b:20:2c:7e:a8:b3:29:2c:92:7b:83:0e:24:ac:
                    20:0f:c8:17:d7:9b:07:e3:3b:d7:62:c8:19:86:2d:
                    06:b6:e2:77:0f:f1:6e:09:1a:8d:ba:30:96:c4:b3:
                    43:e8:88:da:12:90:8d:94:87:29:b3:d9:54:02:1e:
                    14:d8:c5:d2:18:f8:bb:f9:d3:b7:23:53:ff:d2:16:
                    9c:0e:20:50:60:e4:5c:43:01:73:82:c0:a9:41:0e:
                    d0:0a:70:cb:65:4f:d9:5b:6c:f0:e9:5a:20:17:0b:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:55:8C:81:67:C7:57:F7:A8:D4:96:46:EC:EA:4B:83:3A:82:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.216.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:41:aa:eb:23:31:b1:fe:df:bd:37:67:d8:5a:a5:d0:42:
         ae:18:91:9b:a4:b4:d1:b7:5c:dc:a5:ea:78:83:d7:02:4d:41:
         70:ec:f0:e8:bf:dd:50:75:e0:5c:a5:d1:24:b9:40:71:f3:9c:
         8f:cb:ba:da:6e:3f:2a:64:37:b0:3c:5b:1d:21:91:52:b7:35:
         92:9a:32:a4:b3:df:04:99:e3:e5:4f:01:03:b6:9a:b1:82:cf:
         f4:1a:87:db:70:9b:ac:ab:85:1f:19:3f:db:f6:dc:30:d6:36:
         7a:62:a6:73:f7:34:90:09:d7:b8:aa:36:d0:49:d5:bc:17:e2:
         d8:d3:75:34:fc:10:f7:44:4f:42:38:8f:80:29:d9:e2:bd:e2:
         0f:7e:89:31:d2:23:dc:c4:98:43:d3:e2:ff:e5:ea:d6:75:27:
         c9:3d:51:9d:fb:0f:8c:a6:14:ed:f4:4e:cb:01:e0:2a:c7:77:
         7f:94:7f:fa:8e:11:90:d6:1b:c3:04:f3:72:72:a6:fd:f6:af:
         f8:03:29:a9:db:a5:19:50:3d:6e:c4:78:8d:df:37:32:f5:ee:
         ea:e4:a4:dc:1b:9b:fe:3c:9e:59:85:31:a8:26:98:c0:67:60:
         76:b1:c3:cf:b9:1c:0d:26:76:59:11:42:38:e0:bf:4e:de:a9:
         88:4c:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org