Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa
File:                     6d9dcc85-09a8-3533-9fcd-a798920789a2.roa (raw, json)
Hash identifier:          9gK3xmh8VAXqcDtNjMAvlN+WGUJaf3CiIyKcyHn3KtQ=
Subject key identifier:   CC:BE:70:7B:C3:36:64:48:3D:94:CD:66:BC:79:EF:05:E2:A0:7B:76
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285845174AE3EBAB7B327D0BC13680
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     54113
IP address blocks:        198.54.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:e3:eb:ab:7b:32:7d:0b:c1:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=86b5d6c3-dc85-4ec6-9fe5-09e0df98c78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:6d:a3:44:0f:61:17:b2:1e:c2:11:fc:95:
                    e3:2d:35:0b:5a:c8:a9:cb:5c:cc:e2:3c:87:72:0d:
                    a5:80:8a:e9:85:1d:28:31:a2:05:c1:89:98:ad:5e:
                    24:5b:7a:2d:dd:b6:cb:e9:9a:fc:73:9f:b6:e1:6c:
                    be:3b:1b:ea:b2:9f:ff:cd:d8:dc:3d:0e:45:b5:fd:
                    b9:33:08:08:1c:39:88:54:e7:28:4d:04:cd:d8:17:
                    9f:75:b7:02:11:3d:9d:b9:60:92:1d:dc:15:cd:26:
                    1f:44:c1:31:04:e9:7f:2f:01:88:65:a5:e2:e9:d7:
                    43:3d:87:49:e3:64:f4:d4:8b:04:b3:f3:15:86:82:
                    f4:f1:82:02:69:06:e0:d2:66:17:0f:ce:a4:7b:46:
                    26:8c:ac:d4:6b:3b:a3:27:69:24:74:43:bb:d5:a9:
                    8d:a9:13:e6:a9:0c:57:89:67:17:10:8c:3a:c6:a3:
                    fe:ce:ab:8f:88:6a:fb:59:81:c8:3a:51:ac:41:82:
                    6d:06:d6:14:e9:02:d4:80:49:73:53:9e:54:df:ef:
                    f8:08:e2:32:52:cc:14:10:4e:0d:7a:90:00:4d:04:
                    bf:8d:5b:1f:b5:88:d3:b1:c4:bd:21:b4:d9:fb:76:
                    14:d0:24:c7:f3:11:d9:29:af:48:16:0c:66:d1:51:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:70:7B:C3:36:64:48:3D:94:CD:66:BC:79:EF:05:E2:A0:7B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.54.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:ea:a5:fa:02:47:9b:ae:91:d7:b0:9f:62:e2:30:d5:60:
         b2:32:1d:6a:ae:22:aa:bd:a6:1f:b6:f8:a4:3f:8f:40:6c:af:
         d1:d0:7a:ec:8f:4a:40:a6:31:7d:6b:be:48:de:6e:ad:ee:ed:
         f4:08:84:0a:5f:a0:29:75:a4:b4:62:f1:06:1a:aa:da:d0:ae:
         81:ee:95:0c:bc:31:56:8d:ff:24:68:e1:0e:ed:61:c5:3e:67:
         f3:c5:d9:fd:61:7a:5c:0f:c3:25:94:b7:17:d6:f5:93:a2:de:
         a2:a7:f3:3f:5b:e9:9e:37:46:31:ae:4f:b8:5d:63:bc:5d:b2:
         f4:d8:a0:7c:68:4a:04:9c:ae:58:da:0f:f6:e7:54:f4:54:ea:
         32:28:85:23:21:14:c5:bf:ad:d1:6e:ed:15:9e:4a:ce:28:b9:
         fa:be:ea:dd:19:aa:ae:8f:a4:15:1c:9d:b2:8c:45:78:c9:1b:
         a1:50:0c:33:ed:e3:d9:fe:eb:82:1c:64:8c:47:c9:ee:74:9b:
         ff:7d:de:70:dc:53:da:91:0b:3d:0d:04:9d:6d:73:1c:6c:2e:
         df:8a:a5:6a:97:7e:4e:4e:9c:a3:98:df:aa:32:04:2d:90:ef:
         66:f3:db:24:1b:28:5a:d4:53:b9:95:46:53:fb:52:b4:88:b3:
         5b:06:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:50:54 2024 by rpki-client on console-fra.rpki-client.org