Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
File:                     93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa (raw, json)
Hash identifier:          Jclxw2qrPFIxOQcQtwGUswTZnjKiCa8S/1+mr/Ca2RI=
Subject key identifier:   BF:3B:76:66:5B:CB:2F:F6:D4:7D:6A:CA:BE:FD:A4:99:44:EF:B4:06
Certificate issuer:       /CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
Certificate serial:       010D0C9F432858456C87F562ECE0AAAEEDCBC900
Authority key identifier: 5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
Signing time:             Wed 03 Apr 2024 14:47:19 +0000
ROA not before:           Wed 03 Apr 2024 14:47:19 +0000
ROA not after:            Tue 02 Jul 2024 14:47:19 +0000
asID:                     8075
IP address blocks:        209.251.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:87:f5:62:ec:e0:aa:ae:ed:cb:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
        Validity
            Not Before: Apr  3 14:47:19 2024 GMT
            Not After : Jul  2 14:47:19 2024 GMT
        Subject: CN=34e132d9-ed10-4fe4-aed7-36a85ab23b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:3f:b1:a7:3b:ca:7a:d9:f3:03:07:48:5f:
                    9d:d5:77:69:7c:49:ac:24:64:f4:e9:c3:f3:cb:7d:
                    ea:d2:43:7d:b9:2a:ad:70:b3:f9:db:cc:b9:bf:d3:
                    1b:dc:69:44:d5:3c:eb:e8:64:bb:df:33:2e:a5:2c:
                    ff:40:3f:f0:d2:17:ef:c4:f7:d3:0e:4a:eb:8a:38:
                    11:8e:76:34:7a:0e:ca:dd:fd:9f:e5:99:87:16:ab:
                    d3:c8:07:5a:6c:a3:1c:0a:f8:a6:a0:3e:67:b8:38:
                    7b:cd:4d:00:91:c0:e0:ef:c0:75:16:66:44:e3:aa:
                    1d:a8:26:24:5b:97:4c:a6:96:71:8e:a0:06:33:d0:
                    ed:0a:2d:d1:96:46:fa:be:0e:d3:b8:a4:87:10:43:
                    30:a0:17:7e:d3:0d:aa:d0:96:cf:c7:b4:d0:f4:1c:
                    b5:9a:03:8c:b4:7a:6c:4f:af:9c:ad:7d:3f:d4:a1:
                    32:62:be:1c:b6:f2:ce:d8:3f:90:ff:be:3b:19:c0:
                    1f:58:f6:69:01:32:ac:36:f6:80:d1:73:54:6f:03:
                    30:1f:fb:50:a6:3c:f3:b7:eb:fa:f1:ad:5b:fb:d8:
                    c4:46:bb:fd:44:1b:53:f3:15:d0:9e:8a:07:d7:06:
                    12:db:20:a6:cb:36:a6:41:e2:19:3b:17:f7:d1:a2:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3B:76:66:5B:CB:2F:F6:D4:7D:6A:CA:BE:FD:A4:99:44:EF:B4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:84:53:3a:50:26:d3:7c:73:90:16:0b:35:fb:bc:d4:bd:
         a4:1f:b7:2d:73:47:2b:67:71:01:81:c5:c7:ab:c3:d4:c6:60:
         a5:4e:8d:9d:8b:b9:ee:a1:8e:35:04:da:5a:46:03:81:76:81:
         b5:55:3b:c3:2a:44:8a:fc:f4:6a:62:f4:d9:c6:2d:36:20:17:
         ec:8a:fb:06:5e:d9:cf:39:ee:c3:c7:4f:fe:07:71:10:64:2d:
         c4:fb:d4:c6:88:a1:27:67:81:0b:ae:62:bc:7a:be:8d:b4:79:
         19:e8:3b:84:fa:20:2c:15:1c:9d:49:2e:4d:7a:7a:80:e5:72:
         ce:aa:b6:90:4c:8f:17:67:88:38:7e:16:d1:4b:33:7e:82:63:
         d5:e4:54:47:85:fb:2e:a5:f9:63:17:37:11:b8:d8:cd:35:f7:
         e0:4a:84:2d:c9:f8:92:c1:fd:e0:d7:a6:f0:de:91:b2:06:e6:
         d8:f2:2e:98:f7:07:83:ee:6c:64:e8:53:20:07:e8:b1:56:ef:
         d2:09:91:89:21:e8:32:fb:e4:97:61:70:7b:8f:14:cf:6e:ce:
         11:3b:4e:3d:c7:5e:85:0a:5f:da:db:b7:51:cf:02:8b:9e:72:
         98:8b:63:b4:d8:75:49:a8:8b:f7:7e:f3:10:e8:75:d6:de:ec:
         63:79:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:25:04 2024 by rpki-client on console-fra.rpki-client.org