Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dbd298be-ead7-3151-8f4d-4628ac639fb2.roa
File:                     dbd298be-ead7-3151-8f4d-4628ac639fb2.roa (raw, json)
Hash identifier:          ABatFtg6NFD8C6SWIniWn25SOdIJDd9D9QFM8XsYY/U=
Subject key identifier:   EA:81:A1:95:B7:AF:49:D8:8C:36:B7:08:D9:C3:67:FF:8C:B0:53:FB
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285845211048D994BAE0F860EBDA00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dbd298be-ead7-3151-8f4d-4628ac639fb2.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     46606
IP address blocks:        162.215.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:48:d9:94:ba:e0:f8:60:eb:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=d21fbda6-7663-4814-8cc2-5a7b49f54733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:26:a1:89:48:ec:10:a2:20:e7:45:27:19:
                    63:05:a8:55:aa:f2:88:ca:51:91:5e:33:8a:81:6a:
                    2d:98:25:3d:d7:36:c1:2f:99:07:2a:4c:f1:05:ab:
                    e6:23:6d:e5:9b:5b:21:83:85:73:6b:cb:ed:44:8c:
                    12:54:6a:37:9c:35:7a:61:6c:fc:db:7c:ee:0b:d0:
                    99:38:3d:b3:06:cd:50:bd:5e:1c:9e:cf:25:a0:3c:
                    fb:a5:c1:ef:0e:77:54:cd:2e:1e:75:fd:30:fc:12:
                    6a:69:ee:a9:a4:49:7b:d4:8c:d3:fb:60:fd:ca:bf:
                    af:be:61:b0:d7:36:c4:d4:3e:52:d4:49:21:46:85:
                    95:ab:4b:a9:26:8f:9b:4e:d1:ef:29:b5:80:8f:34:
                    e4:5e:7b:5a:75:0f:ff:c6:f1:69:bb:1b:3e:50:89:
                    d6:0f:ca:63:d0:98:82:55:f3:bb:26:3d:48:d3:68:
                    c7:10:c7:19:09:38:1f:4e:43:7b:50:0d:34:8b:4a:
                    68:37:34:8e:11:3a:4f:df:d5:67:0a:f8:12:85:60:
                    34:a9:e3:53:97:7e:6e:e3:29:46:9f:f7:ac:d1:80:
                    e3:2b:fd:7e:0d:b6:e7:27:52:b2:9e:ab:8e:c4:9f:
                    fc:47:ca:f5:ab:b4:c9:83:0c:f9:07:a3:94:b0:15:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:A1:95:B7:AF:49:D8:8C:36:B7:08:D9:C3:67:FF:8C:B0:53:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dbd298be-ead7-3151-8f4d-4628ac639fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:67:07:a1:d8:de:99:e6:d1:4c:6f:89:4e:61:0e:8d:0b:b1:
         b0:a3:0e:80:5b:ce:56:40:c2:c4:96:0d:8f:cc:33:a5:50:6b:
         aa:e7:33:24:17:fa:57:77:78:bb:29:1f:7e:02:f5:0c:ea:22:
         92:16:d5:78:c2:e3:9b:0e:6a:5d:ec:ae:71:2d:4a:33:7c:2e:
         82:2a:24:5a:e0:95:a5:f5:1e:ea:a7:76:c5:2c:b1:bd:b3:3d:
         ae:3e:08:3b:3c:06:64:9a:89:38:7b:5d:39:89:36:e0:70:48:
         52:ea:a6:4b:cf:fb:57:8d:1a:ec:92:94:f2:1f:77:7c:a4:21:
         a3:bf:27:1f:7c:69:0c:63:9e:80:0a:d4:56:ed:e7:34:91:08:
         e6:63:f8:5f:cd:ae:8a:a9:60:6f:40:2f:da:85:7b:0c:b6:31:
         a1:d9:fd:f2:2d:f2:79:f5:42:c2:78:4e:74:1a:de:14:f5:10:
         b3:20:06:f2:d1:7e:de:b2:c7:03:cb:8e:98:db:68:94:cd:9a:
         51:2a:30:28:32:98:1b:6f:8e:57:e6:82:01:69:94:8f:84:10:
         bc:13:dd:13:10:16:d7:82:89:b2:2c:e6:9c:e9:b4:84:14:1d:
         a1:77:37:86:26:48:8a:22:49:99:8f:c8:ca:88:f0:e1:1e:10:
         f3:71:13:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:24:49 2024 by rpki-client on console-ams.rpki-client.org