Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa
File:                     6ba844c7-221b-3c70-9a2c-77d382deca20.roa (raw, json)
Hash identifier:          urV4CsYgaTbit08iSQJTWcwXm5gchKNe2Ky73jOtXfE=
Subject key identifier:   BE:8B:22:16:FE:D8:8E:54:F4:E1:E7:FE:23:44:92:FE:7E:35:A4:4E
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F432858450C201FAFCE388A03D68920F0
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     0
IP address blocks:        199.109.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:1f:af:ce:38:8a:03:d6:89:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=daa1fc19-4786-4fe9-813e-b3b492ece434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:9c:40:72:0c:ef:d4:ba:54:7b:b1:78:0e:
                    a1:e3:c6:7a:f7:64:33:a2:76:b7:0c:86:b9:ad:ce:
                    37:a8:54:24:be:45:7f:9e:29:73:bc:58:ed:92:ee:
                    7a:ee:4f:30:2e:b4:ff:92:5e:c7:69:55:8e:9d:3e:
                    55:da:28:06:3c:48:82:f9:43:fb:e1:07:d7:dc:c4:
                    43:e9:c8:c9:03:79:91:83:ff:6f:50:42:59:16:1f:
                    02:2f:c0:3b:3d:de:05:86:d8:fb:48:4c:3e:36:39:
                    f2:7a:15:3b:e5:09:f7:d7:f4:21:5c:a6:f3:c4:1c:
                    d5:4e:f2:e1:05:12:5c:5a:35:84:fc:e7:1c:48:ad:
                    53:10:13:d2:65:72:f8:1c:87:71:5d:49:fe:de:39:
                    53:cc:f0:bc:76:9a:d0:5a:95:d8:15:3c:49:a8:1c:
                    2d:e6:ca:90:97:11:b7:bd:c3:75:de:a5:42:57:be:
                    65:fd:96:ad:3f:03:79:bf:48:dd:2e:6d:6a:68:d2:
                    03:08:3c:18:a3:db:80:43:bc:35:c3:d6:29:66:3c:
                    02:66:dc:0f:a1:b9:74:c5:d7:ea:98:ce:5a:81:42:
                    7e:b9:8a:1a:9c:b0:54:37:ba:d8:a2:55:9f:49:cc:
                    dd:a6:26:1e:81:e7:bd:b3:ef:73:f0:bc:1c:8c:73:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:22:16:FE:D8:8E:54:F4:E1:E7:FE:23:44:92:FE:7E:35:A4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:20:ba:c6:5e:a8:e7:ee:fc:74:86:0f:49:fb:87:59:73:ff:
         f0:6e:23:da:21:9d:4e:59:1a:c4:15:aa:f7:c2:4e:d8:4e:62:
         eb:da:2c:82:d6:03:1d:71:7c:59:00:c6:cb:56:d2:75:d4:a8:
         48:dd:3f:bd:15:1b:83:eb:24:b5:5c:17:96:84:82:cf:cb:b3:
         6f:17:c8:75:5f:74:7f:8e:27:2a:21:5c:ce:29:55:62:f5:11:
         b0:ae:d3:2c:92:f3:d9:ea:a6:87:4f:f1:73:e5:80:b3:b1:1a:
         0c:1c:a1:2c:4c:3f:97:6a:e6:54:bb:ef:2a:6a:ed:a3:6b:05:
         75:1d:89:66:21:bb:5d:f4:7e:29:ef:51:1d:3d:66:f7:90:40:
         7f:b8:b0:f3:7b:f4:34:d3:21:5c:7e:3e:81:fc:bb:51:ae:27:
         61:aa:70:91:2f:65:2f:14:59:79:ab:57:be:1c:0e:95:18:69:
         f2:7e:b8:39:6c:f5:c5:72:2d:c7:5c:95:53:8a:42:64:37:89:
         da:8b:02:9a:a1:74:83:0d:c1:c4:6f:9b:59:f5:e2:e9:e7:21:
         9b:89:14:27:35:8e:04:b4:ab:49:6b:e2:79:01:05:d0:63:df:
         91:ce:db:5a:c7:ea:9a:9d:e8:25:2f:30:fa:1e:45:b3:6e:2a:
         8d:c4:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:28:55 2024 by rpki-client on console-ams.rpki-client.org