Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa
File:                     bfb2273f-712e-3f5f-b862-366e898e589d.roa (raw, json)
Hash identifier:          FDZPxNC2pfmWAQ10sa/60Kn4BqUlVAdY0f6TUk2iY0s=
Subject key identifier:   C8:A2:28:D8:D7:40:F0:19:43:08:5F:AB:BB:84:42:08:EA:26:F8:55
Certificate issuer:       /CN=798448e2-55be-4c24-8014-28c2c70dfc84
Certificate serial:       010D0C9F43285845C83EC5F4793BF3EA23CEF100
Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa
Signing time:             Mon 06 May 2024 11:14:13 +0000
ROA not before:           Mon 06 May 2024 11:14:13 +0000
ROA not after:            Sun 04 Aug 2024 11:14:13 +0000
asID:                     36601
IP address blocks:        172.83.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:3e:c5:f4:79:3b:f3:ea:23:ce:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84
        Validity
            Not Before: May  6 11:14:13 2024 GMT
            Not After : Aug  4 11:14:13 2024 GMT
        Subject: CN=e48f8459-7ea5-4346-ad77-0c45157493ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:c8:65:7a:5d:5f:96:3e:5c:e0:88:fb:3e:
                    a3:79:1c:6e:5d:d2:b0:39:eb:ac:2e:86:ef:02:35:
                    a2:99:1c:ef:ea:ca:ec:77:67:4f:d9:67:23:c8:0f:
                    2c:10:6e:d7:cb:05:86:a5:2f:e7:b0:98:48:a2:23:
                    0c:81:13:77:bb:e9:80:08:b9:69:bf:71:1b:36:9c:
                    5f:bb:8a:10:db:f9:b6:17:e3:78:36:18:65:64:68:
                    3f:ad:04:15:df:69:50:8b:f4:33:a2:22:53:ec:2a:
                    ec:a9:52:b7:37:7d:a2:b6:81:62:3a:c4:28:d4:b9:
                    dd:19:c4:83:6b:45:89:3a:a6:22:b3:52:a9:c8:97:
                    c8:5b:99:93:cb:ce:dd:0d:d4:06:ba:9a:23:94:51:
                    fa:7f:bd:f9:3d:67:b1:e7:57:fa:b3:8c:46:53:97:
                    6d:68:a3:76:50:ba:1f:ed:ac:4e:f3:69:e3:0e:96:
                    7f:34:66:f4:4b:74:0b:a0:8d:2e:b4:b5:e5:b5:38:
                    a8:25:6c:3c:0d:97:c5:ed:73:84:d3:6e:41:ed:f4:
                    90:6b:9b:4e:b9:0b:9d:8d:ce:8e:fd:12:8c:38:b7:
                    1c:28:13:b6:eb:9f:ce:cf:e3:85:b7:31:d8:cc:82:
                    45:eb:ce:ea:a7:9b:e2:ac:35:1d:4e:b5:03:ee:c8:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:28:D8:D7:40:F0:19:43:08:5F:AB:BB:84:42:08:EA:26:F8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl

            X509v3 Authority Key Identifier:
                keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:34:a0:95:e4:2d:22:1a:21:9a:ea:a9:a4:06:6d:87:93:9b:
         27:dd:cb:9d:20:53:fd:a7:2c:e5:89:fa:15:5f:72:6b:fb:4c:
         91:81:18:58:53:2d:a5:d1:7d:ae:ee:0a:be:a8:46:1f:41:b4:
         39:65:9c:15:32:86:ea:7a:67:5b:34:be:ec:c1:de:ca:bc:74:
         f2:94:24:4d:fc:0f:af:0e:78:0c:fd:33:6e:f8:96:ff:a8:f2:
         37:03:78:d0:da:b7:10:82:44:c5:fd:64:30:40:59:06:1d:6a:
         78:37:50:7e:7a:61:78:8e:bc:9f:b0:0b:ad:d9:44:96:a2:d1:
         71:0f:50:95:ac:2a:23:48:38:2a:2e:15:c6:48:e9:54:fd:74:
         8f:5a:56:ca:96:c0:92:04:89:a6:ee:37:57:4d:8f:0a:e8:39:
         02:2e:d1:a9:cc:7f:b0:70:19:c6:ba:a4:36:52:a6:d3:c8:1c:
         6a:2b:f8:59:ec:8a:04:73:dc:4b:b6:c3:0e:87:02:41:f4:da:
         43:be:e1:55:c3:af:2e:c5:14:32:fb:4b:3c:55:95:ff:75:87:
         40:b0:dc:76:df:eb:51:8b:93:0a:8f:3a:e2:56:7b:37:95:0f:
         ab:df:f5:7a:1c:87:6b:fd:c6:02:36:3d:6f:d4:44:88:83:d4:
         55:dd:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:55:17 2024 by rpki-client on console-fra.rpki-client.org