Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa
File:                     7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa (raw, json)
Hash identifier:          aZh0pc9E8Ms3IOGypZiKXa7vgBXBIkDacXCMixrx4gw=
Subject key identifier:   75:CD:46:B1:13:7D:B2:5B:6D:69:CA:74:89:52:B8:D6:DE:3C:0D:9D
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584726D0832074A99DA9DF17C0C0
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        216.238.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:83:20:74:a9:9d:a9:df:17:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=31ceed9f-a003-45f7-893b-cbdaecc666e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:a8:99:64:94:0e:e1:8f:f3:a8:f1:54:f2:
                    46:d1:da:0d:e7:d2:d5:8e:28:78:6f:52:81:6a:33:
                    d3:f2:fb:0b:72:4b:eb:72:27:ce:10:e2:1b:c1:c1:
                    8c:6c:eb:e7:0c:a4:92:a4:a0:d7:59:86:86:23:27:
                    77:4d:c5:19:72:ad:5b:68:30:1a:1c:13:d6:c2:05:
                    e9:0c:26:86:b6:f5:ed:d1:bf:97:78:30:05:4e:9f:
                    36:eb:80:99:63:fe:33:4a:62:d6:cd:13:af:63:94:
                    c0:b0:28:03:82:bf:74:5b:34:04:83:6e:07:af:f5:
                    a7:a1:f6:29:30:10:71:44:52:4b:f7:90:0d:bc:f1:
                    69:07:58:fd:52:7f:1b:5c:07:6e:a3:16:fe:ba:b4:
                    a5:fe:cc:da:1c:f0:e7:24:6b:fb:00:3a:ea:07:cd:
                    90:05:2c:3d:d0:d0:bd:5a:15:b8:0f:cc:db:32:ee:
                    17:63:43:d3:8d:08:0b:83:0e:09:dd:13:59:eb:c7:
                    d6:63:e7:14:fd:57:4a:ea:b0:8e:81:25:80:7a:93:
                    b0:4e:fc:fe:e1:bd:76:9b:be:16:c3:c0:35:44:fa:
                    9e:16:eb:0b:3d:c7:e7:46:c0:a3:27:90:bb:b9:f2:
                    7a:33:5f:9e:8d:b6:26:0c:8e:a5:4f:8c:62:0d:8c:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:46:B1:13:7D:B2:5B:6D:69:CA:74:89:52:B8:D6:DE:3C:0D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:03:7b:97:e7:29:7e:13:9c:99:2d:79:be:fd:aa:e4:be:f0:
         cb:58:18:ab:e7:76:6b:17:b2:8c:bb:1d:7b:e0:2d:53:57:60:
         68:c9:00:79:2c:a8:2e:1c:c2:c6:af:69:ed:26:b1:91:41:33:
         e9:09:1e:93:dc:22:7b:b8:c0:ab:05:3c:ab:e0:db:ae:0c:ba:
         b8:1b:94:ef:93:5d:c4:0b:67:b6:56:ef:82:7b:69:cd:bb:3d:
         75:20:bf:5a:c1:89:ad:7b:be:be:79:26:10:86:66:ea:db:7a:
         dd:cc:86:85:1e:09:1b:1b:14:4e:06:41:f6:88:41:91:43:c3:
         67:65:c5:9c:3c:79:35:ac:7a:9f:33:3c:25:fc:02:9c:a1:86:
         17:82:b7:f8:a5:37:b9:86:59:f4:47:b3:8a:49:1b:78:2f:06:
         88:0b:d9:7a:24:71:43:5d:f4:aa:6b:0b:9f:a5:25:45:59:b8:
         da:57:f3:a7:fd:53:7d:1a:b5:2f:94:3e:74:89:29:a2:ed:ba:
         5b:b3:86:5e:37:c1:27:08:24:16:52:b6:d8:cf:b0:71:ae:8e:
         a9:0b:db:23:5e:37:24:a5:98:fb:7e:f5:30:f8:f8:3c:c0:4f:
         e3:d6:6a:1c:c4:37:4e:48:22:cc:ff:70:81:8f:e1:7f:8c:46:
         9b:be:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:02 2024 by rpki-client on console-fra.rpki-client.org