Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa
File:                     ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa (raw, json)
Hash identifier:          3rP/a4mYnCn3qvWX0un4vaCxt52lLMXvM+35RbxKUBY=
Subject key identifier:   76:AD:4C:60:7A:45:19:E1:80:99:C9:DB:80:C7:B8:9D:A7:27:0B:4F
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F4328584548081C5BA5D5132BDC65E7C0
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     62744
IP address blocks:        204.8.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1c:5b:a5:d5:13:2b:dc:65:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=6ca932ef-bbe8-483a-9585-c48b8753140b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:b3:41:0e:60:06:ff:b8:a6:19:42:d5:fd:
                    5c:67:40:88:56:5f:d0:ce:84:c2:b6:14:04:79:fb:
                    4a:5e:f4:57:5f:63:31:9a:b1:6f:d1:27:87:43:4f:
                    8a:cd:df:0b:9b:dd:15:9f:99:28:be:8c:c6:0c:23:
                    cc:74:5a:8c:27:7c:41:0d:8f:c0:d4:75:02:72:d0:
                    bc:ee:57:68:2e:70:5c:d7:ab:fa:8f:cf:05:ee:50:
                    ee:8d:99:e5:90:cb:18:c7:89:1a:85:79:17:9f:30:
                    54:1f:42:1e:81:a2:1f:b4:64:3b:07:2a:d5:5f:4c:
                    f3:f6:3f:d2:fe:20:5f:13:a1:c5:5e:59:1a:76:d6:
                    1e:d4:36:90:fe:ea:27:cf:b7:63:39:28:b2:b3:87:
                    54:a2:24:d9:42:62:ea:ec:59:a1:68:a7:f2:b5:92:
                    7e:de:24:42:3a:a2:0b:56:6f:75:81:ae:20:54:20:
                    d9:9d:b3:eb:c3:7d:18:ca:d3:26:ca:06:a6:7b:0a:
                    20:d5:25:d4:8f:ac:e1:7a:de:8e:09:d2:f6:ab:d3:
                    0b:39:6d:3d:aa:e1:1e:46:f8:ff:2b:49:ea:37:b3:
                    a1:a1:d3:f9:c1:15:c0:6c:ab:00:be:31:f2:10:2f:
                    f3:72:04:94:51:9f:0a:8e:19:51:d0:45:20:af:3a:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:4C:60:7A:45:19:E1:80:99:C9:DB:80:C7:B8:9D:A7:27:0B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:04:48:44:82:ea:46:5d:24:f4:6a:1a:88:99:9c:ad:8f:
         9c:b3:c6:eb:43:cf:b6:9a:87:68:3d:14:e0:12:d3:85:d6:5a:
         a4:ea:9a:89:d4:1a:2c:d2:08:ad:c3:b8:3e:33:e0:48:81:84:
         84:a5:cf:69:f1:ff:2e:56:cd:de:32:0c:43:cc:1b:ca:53:de:
         d8:33:e1:98:20:62:a4:13:c5:a7:73:67:51:09:c2:5a:b8:ba:
         5b:b2:ae:67:51:71:31:4f:f3:b9:30:75:83:18:7a:13:da:76:
         2c:86:43:be:25:bc:94:8c:f6:31:86:4b:f0:b7:53:93:52:c4:
         df:9c:41:37:e9:e6:2f:3f:93:b4:56:fb:87:68:6a:01:f0:ec:
         16:60:a1:5c:a9:ac:bc:e5:93:a7:2f:87:87:40:5e:dd:ee:62:
         ec:3d:fa:be:86:45:14:8f:73:ec:c6:94:e6:37:99:58:30:c7:
         59:f9:c6:b4:3d:4c:7e:6f:ed:83:40:36:32:28:2c:c2:f8:bd:
         c5:82:42:20:db:69:03:6c:5c:b3:61:9c:a8:ca:6b:22:8c:d0:
         49:28:7c:06:1f:85:92:61:4c:6f:cf:6f:7e:e2:e8:50:c4:57:
         8e:24:8f:2c:77:30:b6:9d:2a:f1:aa:d4:46:c3:2e:8a:00:b7:
         dc:d8:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:40 2024 by rpki-client on console-ams.rpki-client.org