Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa
File:                     d7dd5709-9667-372c-9cec-74583a3fe27b.roa (raw, json)
Hash identifier:          xFm0KCoDWVzQC3l9JshfUcRP2oIGb6i1JOrhzIwXwyc=
Subject key identifier:   16:8A:42:E3:D1:67:59:82:52:5D:B2:A4:AB:2F:4C:EE:6F:A5:8D:78
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F43285845698862EEDEBA533083E84D00
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        162.247.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:62:ee:de:ba:53:30:83:e8:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=738ab10c-2d27-49b3-bbc7-9d3eb85be7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:5d:65:96:e7:8f:2e:60:6a:40:b8:1e:9b:
                    f5:53:1e:05:88:19:6b:10:3d:b9:a8:da:2b:2e:2a:
                    9a:a4:45:4f:0e:26:82:5b:1e:e5:6a:7f:a1:6b:e7:
                    75:30:2e:af:ca:ce:c8:ed:25:9f:80:9d:2f:5e:2e:
                    7d:6c:5d:92:2f:64:cb:4f:67:51:3b:3b:44:99:f5:
                    b7:54:cc:1b:2e:62:ca:f7:33:e6:50:e3:d7:c6:73:
                    0b:e6:ef:3f:ca:c3:20:57:4e:70:6c:3b:41:78:18:
                    2f:52:55:7f:bd:ba:09:aa:82:d7:82:6e:6e:61:a2:
                    4e:60:63:eb:22:c3:db:26:5e:9f:95:2d:2f:18:c8:
                    5b:48:cd:7c:b6:52:fe:22:67:fe:cc:93:46:e0:bd:
                    ea:e6:4a:b2:4f:5f:26:49:9c:d8:e7:eb:41:b1:2e:
                    63:d4:91:20:c8:e1:83:77:50:d5:12:06:d9:af:0b:
                    86:2e:7b:8e:ec:3f:7c:70:90:11:9f:86:c7:53:da:
                    b6:77:48:69:d4:dc:87:ab:58:7c:3a:de:32:9b:a7:
                    75:97:3d:bd:d4:8f:b6:bb:4e:6b:37:30:34:47:60:
                    43:5d:7d:82:f4:d7:d7:56:b8:a1:b8:21:61:61:19:
                    26:b1:ad:fa:1e:0e:ed:4b:37:fe:f6:2b:5a:10:7a:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:42:E3:D1:67:59:82:52:5D:B2:A4:AB:2F:4C:EE:6F:A5:8D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:6b:83:7e:08:9c:f3:7f:d2:58:6b:42:fd:28:29:3d:60:
         29:db:14:f4:2d:20:e3:f2:f8:bd:ac:30:9c:70:a1:d0:68:90:
         3a:14:91:ff:ee:0d:e9:39:41:76:69:58:b1:3b:ca:7e:88:f9:
         a1:c1:27:17:a4:cf:33:7b:d4:93:75:47:a1:a1:05:3c:f7:7f:
         33:36:a5:dc:8f:83:97:92:b5:86:52:93:ea:64:35:10:cd:25:
         97:2a:c3:c3:c9:07:23:46:f7:be:24:c1:84:dd:f7:f2:d5:d6:
         10:ef:8a:3b:e4:34:80:99:a0:e6:5f:82:d6:71:8a:11:e7:f6:
         78:86:5b:33:83:b8:04:f1:48:33:2b:ac:5b:4f:fe:a7:3b:d7:
         10:11:0e:b2:78:8f:99:ca:ea:5b:43:5c:44:b6:58:38:e6:09:
         2c:48:a4:48:64:ad:f3:6e:7b:b2:be:ee:e8:9a:f5:49:f4:f4:
         00:df:39:88:fe:0d:f1:da:5c:84:cd:91:54:e1:d6:92:b2:ee:
         81:2a:d9:ab:93:8f:c5:60:c6:f0:44:f7:d7:f2:e2:ad:c4:fa:
         f9:88:8d:48:4e:1a:1d:bd:e2:57:01:ef:a7:8b:bb:26:9a:0b:
         77:d3:f6:b4:3c:e5:c5:0a:1e:8d:c3:46:b2:90:ff:74:1a:8d:
         4b:ed:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:52:16 2024 by rpki-client on console-fra.rpki-client.org