Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa
File:                     0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa (raw, json)
Hash identifier:          G1AaKIYhDACDb/H/3EaWb/81JUYlqPnqKAlJsmD2ySQ=
Subject key identifier:   3F:46:E2:D3:AE:B8:E7:02:9B:70:12:B5:14:A6:BF:C7:F1:C4:59:49
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F3584E79BF678ECF7286E2
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        165.227.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:58:4e:79:bf:67:8e:cf:72:86:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=3fd77806-a296-4f86-819e-0b5155c0ad2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:a0:e5:4e:03:8f:93:ec:45:0d:5a:34:b0:
                    bb:e1:e0:a6:0c:89:5e:48:d6:69:1b:73:2e:e9:da:
                    cd:70:e0:76:c9:dd:a0:aa:87:e7:c3:7d:4b:43:a4:
                    69:13:d8:00:84:69:d3:a2:e9:54:6e:bf:a5:4d:5a:
                    18:c8:d7:04:1c:12:e7:f0:9b:3f:76:94:26:8a:99:
                    c0:b0:66:3c:6a:3f:3e:4d:a5:e9:f7:f6:9f:47:da:
                    a1:ba:42:11:00:22:3d:99:04:b2:5c:47:07:f3:eb:
                    de:89:68:91:8a:0b:7b:01:1e:1d:f6:1d:de:47:5a:
                    20:85:bb:09:b4:bf:d8:d3:d8:b8:56:00:cc:b0:b6:
                    05:84:1e:c0:5b:1d:36:e9:96:be:d5:16:00:fe:e0:
                    e6:44:0e:39:c5:29:34:00:d4:3f:ce:e1:b6:6c:ed:
                    3e:f8:a6:f8:9c:c6:9f:0e:97:d7:8f:bf:50:1a:50:
                    fa:09:2c:b7:64:78:c1:5f:16:db:e1:29:f0:6e:2f:
                    02:43:cf:db:b1:f9:b9:c4:1c:8e:1a:1f:c9:ef:a2:
                    33:3c:09:1a:3e:53:c9:d5:ea:d1:c7:77:11:d8:cb:
                    5c:bb:26:de:01:01:4a:ad:b5:5d:c7:af:66:5b:a2:
                    f2:8a:89:61:24:86:50:39:a9:2a:ac:bd:07:ec:96:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:E2:D3:AE:B8:E7:02:9B:70:12:B5:14:A6:BF:C7:F1:C4:59:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:c3:00:f7:2e:9f:d1:ac:ea:a4:2b:c3:37:b4:aa:c7:1e:
         65:f5:51:59:da:db:fd:d3:e1:ad:f1:17:41:60:9d:93:92:63:
         ef:0a:42:7a:f8:e7:66:d3:27:48:c4:e2:87:60:15:6b:72:d0:
         d5:45:82:cb:16:09:5f:03:7c:65:ec:bb:1b:79:3c:08:c4:85:
         26:20:02:df:4f:23:35:8d:2c:c3:d3:c4:1d:52:ae:0c:b2:45:
         50:d6:4a:b0:3d:b2:83:d5:a9:01:05:66:af:37:8c:35:3d:27:
         26:f6:5c:d9:0a:89:11:8d:72:36:5a:a7:56:93:8f:82:5b:5b:
         d7:9e:09:af:a6:5a:40:84:80:93:42:b9:f0:b3:b6:05:5c:03:
         01:7f:b8:7a:d4:10:dc:b4:f8:b9:13:17:17:e4:ed:1d:b4:14:
         e8:f8:8b:9b:e9:13:28:1d:12:0e:98:e1:70:9e:31:d2:f3:24:
         19:3e:c7:12:9c:8a:5f:ab:c9:52:1a:bc:c2:7c:89:b8:7f:20:
         b0:54:ef:13:28:2a:3b:ff:76:56:31:6b:7d:97:8f:ab:e1:37:
         89:e6:0b:58:b4:a9:37:0b:e1:e6:18:d3:5d:3b:f0:b8:94:09:
         ad:96:36:fc:36:49:cd:cc:09:a9:bb:93:2e:4c:57:51:97:63:
         2c:00:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:03:51 2024 by rpki-client on console-ams.rpki-client.org