Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/16dd700e-437e-38d4-88cb-e675b1af2ab3.roa
File:                     16dd700e-437e-38d4-88cb-e675b1af2ab3.roa (raw, json)
Hash identifier:          UrrYJWzISQx3PuXAGYrFDDsyw5bq8rdZf+yq2m3w9rc=
Subject key identifier:   DB:81:CD:ED:00:B5:E6:34:4A:52:AF:01:9D:8C:46:4D:ED:39:95:C3
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F432858452AB7DFCB10994EEB692A5480
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/16dd700e-437e-38d4-88cb-e675b1af2ab3.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        172.93.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:df:cb:10:99:4e:eb:69:2a:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=efb0e68d-7569-48ef-922b-3e3c4800e3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:4e:c1:3e:c3:5a:4d:43:54:89:7a:d0:71:
                    70:66:4d:3d:4e:0e:7a:ec:e1:03:18:aa:b1:30:40:
                    79:e9:62:27:6d:b3:13:fc:a9:d3:cc:e2:94:44:f9:
                    0f:ea:de:fd:0b:da:85:70:3d:72:65:4d:ca:26:71:
                    66:2a:be:0a:96:3b:89:a0:df:1c:56:1b:e7:f1:8a:
                    79:13:95:73:ed:45:66:cf:4d:44:3c:52:29:83:36:
                    7e:74:6b:6c:5a:87:16:05:ed:9d:7c:83:5b:26:9b:
                    01:33:fe:43:ee:03:f0:7b:36:df:c4:b4:fa:c2:67:
                    fe:bb:d4:4e:25:e3:d9:75:12:01:66:81:8a:2f:75:
                    07:51:c8:f1:07:5c:22:65:29:81:92:21:fa:24:02:
                    8f:f1:12:44:ab:8e:2b:0e:ef:b9:4c:fe:c5:92:eb:
                    fc:ec:ef:74:c4:6e:25:3b:c1:10:d8:aa:18:df:2b:
                    b6:94:17:20:30:0d:85:bb:1d:4c:a7:d6:12:65:4d:
                    81:92:bb:cb:8c:4b:b6:cf:21:1a:af:91:f9:e0:83:
                    a8:a9:10:58:16:c8:4f:ee:ed:4b:8e:8a:56:af:39:
                    ca:f9:7c:06:a2:b5:8a:ee:ff:da:fe:f5:34:0f:9c:
                    b4:3a:89:3f:1b:19:ed:5f:f6:b0:12:b3:ba:ec:8a:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:CD:ED:00:B5:E6:34:4A:52:AF:01:9D:8C:46:4D:ED:39:95:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/16dd700e-437e-38d4-88cb-e675b1af2ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:6c:71:be:e7:a7:24:6a:08:31:78:e5:cf:ee:7b:1a:c8:
         4a:b1:df:bf:6b:27:cc:e9:4f:16:a2:f2:b8:46:f2:14:90:65:
         72:6c:19:67:61:45:5a:8c:a8:07:39:a5:0c:15:02:90:08:7d:
         66:e8:08:65:02:a4:b9:ee:a1:55:e6:7f:74:c0:ab:ca:7d:d6:
         5d:08:1e:6a:12:d3:10:0d:b0:c7:04:b5:8b:ef:81:09:45:e9:
         96:16:0c:fe:87:0c:f7:2f:41:e7:39:b3:55:73:2e:1e:7d:88:
         27:4d:db:c4:10:ea:a3:47:1e:1a:75:fd:cd:ef:9e:aa:45:7e:
         17:7b:bb:4d:0b:7e:29:17:7f:70:ac:61:44:10:d6:9f:9d:83:
         9a:57:85:bb:30:8d:d3:e6:b1:29:e2:f7:2a:f0:be:af:61:d3:
         e3:0f:3c:af:b3:f7:73:6d:ae:55:44:52:2d:9a:c1:55:c7:70:
         10:06:58:dc:a4:0b:82:9c:98:d4:27:39:d9:db:78:be:3c:22:
         68:76:80:5d:45:ef:12:9a:15:99:b2:a8:10:ac:86:df:04:72:
         16:2b:3c:98:07:51:c9:f6:9b:1d:0a:89:c4:fa:d0:7e:e9:17:
         0d:e7:8d:8f:15:b0:73:70:78:15:a2:f4:d2:e0:3f:65:75:33:
         26:43:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:32 2024 by rpki-client on console-fra.rpki-client.org