Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b095e89-8da4-3a91-a3db-18ed9574b9e9.roa
File:                     7b095e89-8da4-3a91-a3db-18ed9574b9e9.roa (raw, json)
Hash identifier:          n7FaAecp/kwxEDYJ8rUNwFPkVxxIev+LEQN2DoSTifI=
Subject key identifier:   AB:C3:4B:21:33:43:F2:C6:0A:90:15:D7:C9:74:99:0C:7B:8C:33:2B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F821F2249
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b095e89-8da4-3a91-a3db-18ed9574b9e9.roa
Signing time:             Tue 07 Jan 2020 22:27:56 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        216.167.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:1f:22:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=383c8655-afef-4b06-a2ba-888a5c9ea94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:8e:39:bf:c1:1d:8a:a1:bd:f3:b6:98:13:
                    aa:62:ce:a0:01:0b:a2:b5:4b:a6:59:ad:e0:21:67:
                    ac:cd:76:22:9f:b6:7d:b9:c8:ee:a2:f4:54:cd:1c:
                    e0:c6:56:9b:74:3d:09:d5:b2:85:b0:a9:d1:13:0d:
                    8b:28:4c:50:b8:c3:34:b9:f3:52:33:1f:2d:16:02:
                    44:a8:6a:15:3d:38:5e:c1:aa:0e:98:51:0a:b9:1a:
                    79:d4:0f:a1:f8:9b:c4:b3:4a:14:10:c2:20:8e:89:
                    fb:8b:ae:cd:d8:7a:1b:7b:f2:8b:78:9d:19:65:3a:
                    83:42:ac:d8:6b:d4:9c:15:40:b3:c0:66:99:47:8b:
                    45:5c:ba:b6:6c:6a:44:b1:d3:04:23:c7:51:da:76:
                    9c:39:e6:14:03:78:76:25:41:ff:d4:af:27:3a:a5:
                    77:67:0a:b1:79:a1:1c:13:68:de:fc:51:40:95:d2:
                    e5:ed:ab:79:27:84:ac:27:be:08:8f:53:93:a8:a5:
                    bb:72:0d:37:89:01:02:a7:20:9b:0f:39:14:d2:ba:
                    fb:b8:1c:4c:14:9f:50:9f:9b:27:c8:67:7f:34:54:
                    5e:6e:6e:38:aa:73:96:94:64:b8:83:18:59:46:36:
                    a4:35:d8:92:97:cb:5d:c1:55:a4:84:55:3f:07:d0:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C3:4B:21:33:43:F2:C6:0A:90:15:D7:C9:74:99:0C:7B:8C:33:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b095e89-8da4-3a91-a3db-18ed9574b9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.167.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:00:7c:60:ab:a2:31:3f:dd:c6:c5:e3:09:83:2c:ee:fe:58:
         8d:3e:45:44:44:f6:ec:e3:85:91:ae:fc:52:51:b1:ce:a5:b1:
         ff:f7:f8:c3:90:c3:49:09:c2:81:fe:72:78:d7:29:e4:7b:a1:
         35:d1:5c:1e:a1:08:24:5a:3a:bf:99:af:b9:ef:2b:34:db:f4:
         bc:ab:c5:57:80:c2:db:70:c6:d2:4a:61:d4:b6:03:a9:b3:a8:
         6e:ba:5d:a7:fa:34:02:b7:4c:f1:82:06:58:fe:85:19:2c:85:
         d0:50:ba:b6:91:dc:4a:a4:ae:77:85:c2:76:6a:4a:c4:32:8b:
         00:af:30:34:dc:6c:8b:99:3a:13:d9:f9:5d:73:9d:f4:3f:fe:
         0b:d0:23:7d:bc:67:11:94:64:49:ce:90:a9:35:8d:fa:0a:a2:
         41:e8:95:f7:14:35:48:0c:c3:3a:0c:0e:d2:15:dc:12:f2:24:
         9b:3e:4b:43:ce:0d:70:1e:37:77:81:0d:42:e9:1a:a9:05:8a:
         bb:46:e6:93:72:f0:88:98:7f:51:3e:9e:8c:44:b5:58:6b:04:
         fa:c4:68:87:f2:02:a8:14:e3:bf:d0:19:0c:04:14:f1:0d:7a:
         a3:15:45:9d:00:45:bd:3d:15:2b:4d:bd:f5:18:33:72:32:8e:
         24:87:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:03 2024 by rpki-client on console-fra.rpki-client.org