Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa
File:                     43620bc0-0a8d-3868-a9e5-6957181b005a.roa (raw, json)
Hash identifier:          2sKVB8vIQt95N9LTINfWdyJk53kfnHsYFz7HjUQrhJg=
Subject key identifier:   E7:02:89:34:4A:8A:74:73:D8:FB:42:60:52:FA:E6:76:C4:9E:09:F9
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285845211048FAA1F62E2AB1333280
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     46606
IP address blocks:        162.241.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:48:fa:a1:f6:2e:2a:b1:33:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=d160303e-dd70-4376-8587-08ca56039c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:35:59:d6:47:a2:f7:85:e4:2d:c3:8f:82:
                    ef:47:e2:30:db:b6:c8:d8:f0:b1:2e:19:7e:4d:a3:
                    86:03:b8:87:52:f7:c0:13:fa:72:e9:2b:08:c7:74:
                    8d:85:01:21:9a:e9:80:0e:b3:33:41:82:ed:92:6b:
                    9b:da:f8:60:83:4f:c2:b5:0b:00:d2:57:39:9d:de:
                    7b:99:4f:53:6b:d5:75:ea:24:35:b2:a8:2b:c6:42:
                    c3:ac:df:6f:f6:33:d3:18:d1:5e:cd:3e:7d:df:59:
                    53:b9:d3:f7:65:62:cc:eb:70:48:09:18:ff:3a:b4:
                    2d:20:dc:32:96:84:69:a9:96:86:f9:97:ce:72:4d:
                    b7:cd:27:6b:06:f1:fa:8b:a5:f3:fd:2c:2a:d6:a4:
                    50:ce:42:47:b0:e7:4b:a4:30:90:e6:24:ce:92:ff:
                    4b:0c:e9:78:a0:6f:73:36:a9:7f:56:98:a9:d4:f8:
                    45:1b:90:77:7a:8a:4b:06:21:93:66:48:a4:d0:05:
                    fb:02:14:50:04:d3:e8:32:bd:81:bb:3c:fe:54:38:
                    38:4c:19:64:60:a8:f3:06:11:ac:1b:1a:05:e3:5d:
                    a1:10:97:fa:a5:1b:cf:c3:0f:93:31:ae:c0:04:4d:
                    ce:13:63:d1:8c:c5:e3:06:8e:ab:54:a3:64:dc:0b:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:89:34:4A:8A:74:73:D8:FB:42:60:52:FA:E6:76:C4:9E:09:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.241.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:29:1e:8a:93:fc:c4:75:cc:22:fa:48:9b:24:af:d5:87:70:
         8d:c5:44:e5:d7:02:1f:78:93:18:6f:25:f5:6d:85:de:23:e8:
         77:83:a4:b2:cc:7c:db:88:ee:89:6d:0d:28:48:7c:0e:c5:56:
         04:e0:25:82:a4:c3:4a:b8:3e:3e:ad:2d:73:8a:30:c9:9d:d8:
         b2:82:bb:0f:32:1c:e1:19:ff:a7:56:2b:15:2a:7e:d9:ab:2e:
         62:23:92:cf:fc:16:36:b2:41:4d:4f:d2:f3:2e:3d:b2:0b:06:
         73:8d:4f:e5:fd:d8:a4:bd:3a:f6:c6:3d:11:c2:eb:bf:b0:7c:
         da:14:66:f3:ca:6e:d2:ed:35:55:26:73:c4:49:53:c7:76:15:
         a9:0d:a7:c0:4f:ed:c2:ed:b1:ef:6b:78:68:64:3e:11:f2:2d:
         9d:81:4c:dd:4a:6a:1c:d7:46:d7:24:ec:cb:bf:ec:f5:55:f4:
         57:c1:eb:f8:61:20:eb:fd:03:a5:e4:80:6b:9d:fb:30:1f:53:
         3b:59:07:52:ae:da:11:ef:d9:47:d2:bb:65:90:be:fb:9d:f3:
         6b:94:20:aa:54:66:34:ad:ce:5c:0e:d0:a4:43:0f:06:fa:a0:
         bd:c3:ad:17:c8:05:f4:c6:8e:a6:41:ee:9d:05:16:b2:7c:a8:
         9a:30:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:46 2024 by rpki-client on console-fra.rpki-client.org