Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa
File:                     f2080ba3-0987-3949-a7d7-9fc22265700f.roa (raw, json)
Hash identifier:          djnNJZ+30L9fYxg1DNH1lgqbIfbM1rlfLVaCEiJhlR0=
Subject key identifier:   12:26:F0:3D:54:9D:09:6D:44:F4:30:C7:D6:6D:D9:C8:A6:74:82:1D
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F30C9682A72440E0A5AF80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        163.253.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0c:96:82:a7:24:40:e0:a5:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=91cc1494-878f-47c4-b965-243be6bcc3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:6c:38:7c:70:d6:cc:b0:32:a3:ff:ef:db:
                    45:5c:4d:10:00:24:78:a9:96:1b:02:ca:ce:5e:8e:
                    80:20:99:ca:b2:2e:3a:88:e6:ee:de:4c:65:38:76:
                    2e:fd:87:7a:87:a1:14:26:b0:c9:5c:76:1f:92:ce:
                    4e:54:bc:d5:75:28:55:7a:f1:86:98:26:59:14:2e:
                    21:64:40:ab:85:11:4f:c5:07:c9:15:76:55:b7:2b:
                    1f:c6:ce:7b:d9:39:ab:f7:9a:80:59:61:4d:00:1d:
                    69:6a:a8:c0:74:dd:62:49:ff:77:5c:b5:db:b8:55:
                    6f:8a:87:1e:31:e5:d2:67:08:40:b3:eb:b7:f8:e0:
                    5b:e4:81:24:57:a0:64:b5:32:6a:4e:ca:a5:ea:22:
                    f9:76:1f:24:0f:a2:6f:56:9b:f5:32:44:9e:28:f3:
                    aa:33:a2:5f:66:39:bc:7b:b4:76:e8:da:32:1e:2a:
                    2e:b5:2f:cf:6a:d3:17:bf:18:28:03:b4:b6:69:12:
                    37:aa:21:81:d3:64:22:35:3b:09:b9:1b:f8:df:66:
                    fe:98:a8:19:a2:9d:70:e5:28:e8:a6:d9:f9:3a:10:
                    75:3e:fe:82:ed:45:00:a2:62:16:7b:da:49:10:b1:
                    20:36:3d:c6:d5:f7:a1:dd:1d:17:e8:b8:83:d1:ae:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:F0:3D:54:9D:09:6D:44:F4:30:C7:D6:6D:D9:C8:A6:74:82:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:cc:97:78:d2:f0:cb:4c:21:ef:e4:44:92:c6:94:bb:ee:
         d5:4b:63:a9:bf:d2:1c:3e:42:9b:df:16:7c:9c:48:00:55:83:
         0a:f5:ec:c4:9a:f1:8c:7a:71:75:34:9e:ee:b6:8b:53:7f:03:
         01:e8:4f:2f:94:80:30:8e:52:60:78:68:a9:5d:46:19:cd:44:
         ce:ff:f5:2a:68:21:18:6a:35:10:b0:79:4f:6c:73:bc:fa:ef:
         25:09:8b:dd:0e:78:d1:90:28:b9:2e:c3:c3:0b:38:05:1a:ef:
         97:65:e8:f3:97:cd:d6:bd:a4:5f:e1:a6:a6:ec:39:8d:7d:0e:
         af:95:fb:63:c0:9e:22:5b:51:c9:4d:3a:45:f7:30:de:2e:9c:
         35:1e:3c:36:8a:f4:54:c2:b4:09:b6:af:b6:a9:d1:0b:72:ab:
         b7:9c:b9:9c:30:00:ef:1d:3c:92:f4:a1:f9:e5:99:ee:9e:90:
         7a:34:c0:1f:4e:5c:c9:5e:03:9a:27:3f:ec:dc:3d:66:6d:1c:
         44:3d:0d:7e:e0:14:55:19:7c:b7:c3:cc:ac:db:90:85:0d:cf:
         ef:4a:d5:1a:3a:8c:05:a1:ea:16:4e:87:65:bc:2b:9a:f1:34:
         62:84:a0:7f:71:84:a5:5d:91:17:ab:fe:4b:76:0f:bc:df:e6:
         ca:de:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org