Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d4dff042-9299-3a7b-a88c-13a1fea7cfd7.roa
File:                     d4dff042-9299-3a7b-a88c-13a1fea7cfd7.roa (raw, json)
Hash identifier:          eA4jSNLdJqrNi8jxpCJCjA3iTZWtOG1i1T4SypKcBgU=
Subject key identifier:   2D:E8:42:5C:4A:56:59:30:83:15:CC:21:C4:62:3E:B9:13:A9:7A:AD
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F357AD7F78DCD20925EA40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d4dff042-9299-3a7b-a88c-13a1fea7cfd7.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        162.243.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:57:ad:7f:78:dc:d2:09:25:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=1aff4ca0-b84c-4f16-b7ed-b8afb81366e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:b9:a0:dc:87:15:5b:d7:2d:cd:61:56:20:
                    38:c7:54:08:5b:09:fc:b0:a9:ba:c0:74:35:7f:03:
                    9c:8f:19:1d:76:1e:8a:95:1f:c2:47:c5:27:61:47:
                    9d:5c:cf:2c:c0:23:4f:8e:03:42:e8:2b:a8:10:1e:
                    0b:7c:f2:0e:67:5a:f8:6e:99:b3:74:08:85:fb:d3:
                    86:27:54:8f:0c:6f:a0:29:2c:34:0c:61:85:23:92:
                    26:e4:78:dd:bd:b2:6b:9f:96:b0:1e:a6:61:f8:36:
                    ea:bc:aa:e9:74:0c:88:bd:30:40:58:2f:ae:dd:cd:
                    d2:df:85:b3:14:8a:14:49:4f:6d:c0:2e:74:8a:4c:
                    a3:85:30:5b:60:26:e7:21:f9:5e:ae:48:fa:85:e1:
                    96:19:29:9c:fc:4b:e5:b3:1c:46:0d:aa:fa:65:2c:
                    8c:25:51:2f:99:cb:37:e7:93:4d:72:d6:c2:c1:42:
                    9e:23:c8:68:e5:33:07:56:74:1a:50:4e:4f:31:38:
                    55:62:c7:f7:9f:cd:1b:e7:87:01:3a:14:1d:ce:39:
                    67:54:70:1b:b6:3d:19:ca:23:7e:06:69:c3:21:31:
                    6b:5e:75:6c:41:65:a4:78:d1:90:93:bf:35:48:30:
                    8f:78:86:3b:cf:51:43:12:84:62:44:05:c2:9e:2a:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:42:5C:4A:56:59:30:83:15:CC:21:C4:62:3E:B9:13:A9:7A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d4dff042-9299-3a7b-a88c-13a1fea7cfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:3c:d2:27:64:dd:78:0a:aa:73:73:29:d1:41:e1:aa:0b:
         9a:bd:c7:49:86:85:7e:96:e4:7c:09:c8:83:84:ef:ac:ef:d0:
         6c:28:42:e0:b9:cb:d8:14:02:09:2e:37:70:ac:ff:6b:93:f4:
         bb:7c:2e:5a:eb:b3:6b:a0:4b:dc:f4:9d:cd:88:4e:56:57:67:
         1c:b3:2d:2e:5a:e2:28:d9:b9:ff:45:66:fd:08:94:3b:a8:bf:
         d0:9c:5c:7d:f1:ba:b1:af:2a:e0:37:ed:15:6d:71:c2:1a:cf:
         79:2f:25:3b:a1:91:36:dd:94:0d:7c:c8:f5:b2:49:49:d2:3b:
         c8:e6:8a:c3:53:7f:7c:88:99:55:e7:36:4d:f9:9b:fb:ed:6c:
         17:b6:a7:5d:f5:cf:c8:6a:91:dd:3c:83:0f:fd:10:c4:c3:a3:
         10:1f:81:02:81:61:df:43:52:31:5e:f8:73:ba:a4:c9:46:c8:
         51:a3:ff:59:1f:00:78:67:86:a6:92:51:b7:fb:46:3a:44:99:
         68:76:0e:a4:4d:89:36:04:8b:4e:ce:a4:16:72:92:cd:af:64:
         c2:53:53:dd:bf:e6:f9:26:f6:20:1e:21:4a:f3:85:13:f9:fb:
         03:05:98:a9:fa:16:01:8a:32:77:ba:3a:42:81:7b:09:d8:fe:
         4b:75:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:31:24 2024 by rpki-client on console-ams.rpki-client.org