Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/187eba3c-4384-3cf4-bce2-2ebe235276bd.roa
File:                     187eba3c-4384-3cf4-bce2-2ebe235276bd.roa (raw, json)
Hash identifier:          FgIBgmrLXAScFdEwjcrAE7AJUnYpKmegUP/ynqlVHgk=
Subject key identifier:   80:C0:96:A4:EA:4B:21:4B:FC:F0:3E:DD:FB:96:37:08:ED:07:8F:EF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842E38731C3D8EE46AAD5C29E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/187eba3c-4384-3cf4-bce2-2ebe235276bd.roa
Signing time:             Mon 14 Aug 2023 12:00:00 +0000
ROA not before:           Mon 14 Aug 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        108.162.220.0/24 maxlen: 24
                          108.162.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e3:87:31:c3:d8:ee:46:aa:d5:c2:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 14 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=077379d9-d5c7-4a50-a5cf-a332934f8847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:19:9f:d9:b2:dc:21:e5:22:5f:06:75:24:
                    a6:f2:ae:ed:77:fd:e5:06:fe:7c:92:c7:38:58:1b:
                    24:2b:e1:c3:22:6f:6c:aa:75:59:b9:b3:77:0e:05:
                    2f:8b:b7:ea:8f:21:04:2d:ff:b9:7d:2b:37:1c:46:
                    5a:9e:1f:03:5a:19:57:c2:a6:ea:e4:7a:1a:35:00:
                    c4:98:a3:6f:31:9f:df:51:2c:1c:75:a3:f9:16:2e:
                    9e:a2:dd:3f:63:88:4a:53:da:ad:b5:9b:90:87:af:
                    c9:49:42:4d:13:9a:c1:6c:a2:f5:6d:7b:19:a8:29:
                    21:12:e6:1e:f6:6d:e7:14:05:af:60:77:cb:65:3e:
                    37:5c:ff:2f:d2:12:61:a3:a3:d2:a7:8b:67:46:83:
                    3b:b4:ac:62:e0:93:9b:94:3a:3f:a0:2e:00:b2:3f:
                    4d:0b:e8:07:0c:5c:2a:04:e9:50:8b:8d:6a:6f:7b:
                    8d:5c:09:fb:b3:25:a3:d5:30:10:b7:34:4c:6c:7c:
                    c8:a1:75:06:b2:96:56:8b:5b:12:53:c9:86:97:e6:
                    4a:35:79:61:41:76:f3:38:c6:ae:0b:84:1a:d1:ec:
                    97:ae:fe:21:39:6f:93:a1:f0:f5:a2:43:ef:a5:ab:
                    f9:6e:5a:46:27:1a:a1:9c:75:18:69:33:a3:84:99:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:96:A4:EA:4B:21:4B:FC:F0:3E:DD:FB:96:37:08:ED:07:8F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/187eba3c-4384-3cf4-bce2-2ebe235276bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:b1:5a:38:94:54:ac:65:4d:bf:16:ed:47:c9:8e:c6:77:
         c9:e3:ff:32:10:00:e3:6d:f7:38:87:71:b1:84:8d:9e:51:de:
         9d:ff:0b:57:22:7d:02:49:53:07:ea:d8:d5:db:50:f7:af:87:
         64:34:f7:0f:d3:69:ac:ba:0b:0c:4c:c2:46:be:a6:0f:8b:3a:
         da:27:18:95:09:06:74:c3:82:ce:de:be:e6:7f:33:84:18:ec:
         1b:70:86:b7:8a:ed:cc:46:1d:40:1c:6c:17:4e:f5:29:61:ba:
         d0:ba:98:17:37:69:60:73:aa:df:f4:88:47:ec:30:f8:de:66:
         96:1a:59:65:bc:3c:ff:93:ab:19:d9:b8:a9:1a:1f:8f:01:1c:
         fa:ee:f9:11:68:97:c9:89:08:20:bc:d3:f8:d7:21:c2:75:a6:
         8b:d1:a1:af:bc:cd:da:f8:a7:df:fa:f0:da:bf:f9:4b:a0:c0:
         5a:5e:9e:db:27:67:fb:83:ff:38:59:b6:a0:11:ab:46:5e:a9:
         8b:89:97:da:50:28:9d:01:9c:7d:8a:a3:bc:ed:90:41:31:ff:
         d0:77:c4:63:ef:3c:76:6d:98:02:b7:36:c6:8b:02:65:27:87:
         89:eb:a4:3d:04:93:4c:1b:27:a3:f7:99:20:6c:87:db:ee:ec:
         f8:47:de:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:03 2024 by rpki-client on console-ams.rpki-client.org