Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
File:                     866a1286-9086-381c-bebe-035302ba5bb7.roa (raw, json)
Hash identifier:          Jsdt4FRVjkF+tCBNa4e+TRYwNlZHsS4pVMB9znE92O8=
Subject key identifier:   4E:43:A1:74:D2:8C:62:C9:AA:E9:1A:F3:51:2D:B7:19:23:2F:79:C5
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F432858452C37F8E07F97EA3C8F0773B0
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
Signing time:             Mon 11 Mar 2024 13:54:25 +0000
ROA not before:           Mon 11 Mar 2024 13:54:25 +0000
ROA not after:            Sun 09 Jun 2024 13:54:25 +0000
asID:                     16509
IP address blocks:        150.9.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:37:f8:e0:7f:97:ea:3c:8f:07:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Mar 11 13:54:25 2024 GMT
            Not After : Jun  9 13:54:25 2024 GMT
        Subject: CN=29481153-4c66-4b0f-b816-5a200dea08de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:78:ea:80:55:31:7c:2d:2f:bc:7a:db:3f:
                    81:b8:1e:3c:04:90:77:12:8e:c8:53:cf:0f:a9:41:
                    51:67:41:78:2d:bb:be:25:e3:fd:02:68:ce:87:cb:
                    d7:74:70:f1:29:58:f4:bb:51:54:0d:0e:0a:b8:05:
                    24:3f:96:30:49:53:0b:49:d9:81:55:78:6f:bd:b0:
                    d8:dc:d7:34:71:7d:3c:a5:c4:4b:9a:2a:8e:c8:df:
                    59:e5:f8:02:ac:ef:da:68:f5:5e:17:c1:89:1b:ab:
                    0f:4f:0e:21:29:9e:5d:72:ec:da:ec:2a:ed:a6:17:
                    f8:5c:ea:d3:35:39:c0:1e:9e:12:f8:88:c2:a0:24:
                    c6:05:f9:ce:6b:49:21:a2:64:aa:17:30:64:d6:49:
                    b5:ee:b5:79:06:f9:bd:ba:08:d4:3d:29:e0:da:54:
                    55:54:20:24:33:21:75:70:d2:89:7c:35:71:ec:d7:
                    76:19:ab:cb:09:d0:80:86:6e:ea:18:74:72:41:e6:
                    ab:64:91:4d:11:d9:75:6c:97:ba:df:e7:23:28:f9:
                    59:46:0f:5d:14:84:1b:30:fc:a6:d2:28:32:92:55:
                    b1:e7:a3:e6:4e:f2:39:48:7c:3e:63:3c:9c:be:22:
                    8c:66:5a:09:9c:69:90:39:a2:8e:e7:bf:74:3b:91:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:A1:74:D2:8C:62:C9:AA:E9:1A:F3:51:2D:B7:19:23:2F:79:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:11:85:91:e0:fe:eb:6b:46:dd:6f:54:3a:07:f7:a9:84:2d:
         10:53:7a:dd:6c:af:c2:4d:e4:83:69:bc:3f:ec:5d:70:c6:a8:
         7a:41:64:d9:23:f2:31:35:96:85:58:69:2e:2b:b4:d0:3f:c2:
         b7:5a:46:84:93:a7:6c:79:99:8d:97:48:36:c5:b2:74:bf:ed:
         43:15:22:82:f3:c6:ed:b2:57:33:63:6c:23:cf:31:50:21:d5:
         ff:06:0f:0d:00:c8:46:0e:1e:a1:66:03:3f:f2:26:dc:3a:d9:
         c8:21:5d:b3:1a:a7:ab:c1:4d:b7:fa:77:69:65:92:be:20:5c:
         72:25:6d:f6:c1:02:03:4f:52:56:fd:37:c4:38:07:15:6f:c5:
         7d:cc:a3:84:d6:42:05:07:da:ea:74:c0:da:28:63:8e:a8:99:
         2b:45:9d:26:cf:15:3c:73:4b:a2:fb:b8:8f:3e:1a:6e:34:d5:
         fb:d0:0e:41:6e:96:d6:3e:0b:6c:23:5b:2d:b7:be:84:de:7f:
         33:16:dd:82:b8:dd:13:5b:03:9f:21:65:13:0e:0a:f2:8d:77:
         4e:6a:87:c4:d9:77:84:eb:14:bb:72:ed:a7:10:fd:25:9d:d9:
         ff:b9:54:bf:55:68:58:c9:a8:24:16:4b:8c:72:46:37:03:a2:
         9f:21:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:29:47 2024 by rpki-client on console-ams.rpki-client.org