Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
File:                     af253897-34b0-302d-99ea-bc80edc69de5.roa (raw, json)
Hash identifier:          cY8GYwL3EBzt77VKPRROaedwXrqkeoWIe/ggJ2NpFMU=
Subject key identifier:   96:FD:EA:98:FE:D2:FE:E9:4C:45:A8:9A:D5:98:B7:9E:12:E2:EB:62
Certificate issuer:       /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
Certificate serial:       010D0C9F43285845AC8A1942A7AAFB86FDB61E80
Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     32450
IP address blocks:        192.107.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:19:42:a7:aa:fb:86:fd:b6:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=c655561f-9809-4906-baff-f2435fd91016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ee:b3:d8:97:ae:e9:0a:31:fa:f5:21:9e:02:
                    9c:57:6b:ee:41:5b:d8:19:bd:aa:65:3b:5b:51:37:
                    dc:3c:bd:12:d9:95:bb:d9:cc:fd:97:a9:d6:49:ee:
                    cb:ca:3d:94:9b:d8:a2:d8:15:31:4b:1b:87:a2:18:
                    9a:22:5c:43:c5:0e:f6:a4:ea:b1:9e:4b:8a:3b:3f:
                    be:32:1e:46:8d:10:4a:c6:99:9d:56:fb:43:ee:eb:
                    9e:08:67:9e:b5:f0:e9:a1:ce:d5:1e:7c:89:2d:62:
                    dd:f9:18:7e:55:95:f4:01:6c:50:cd:a0:bc:a1:e4:
                    e3:76:2b:f5:0c:d0:64:43:0d:ee:e3:0d:b3:63:34:
                    a2:fa:98:58:4d:52:f4:f5:ae:17:34:77:6b:99:aa:
                    2a:34:2e:0d:bd:c7:18:d3:0d:ee:ae:4b:77:3d:53:
                    65:57:ff:09:88:c7:ef:53:ce:ed:40:cb:4c:fd:80:
                    b7:ca:0f:3d:97:f9:ad:bb:ea:69:fd:e0:b0:a4:c8:
                    56:d4:1f:25:f3:50:8e:ec:27:2c:f7:ab:99:6d:c2:
                    cf:22:9f:bd:0c:13:06:e4:e0:68:fd:7e:d3:27:11:
                    3a:bd:f3:fc:5c:e6:85:2e:9b:df:80:a3:a4:02:2c:
                    79:02:37:18:c8:9e:cb:a6:b6:ac:fa:2c:93:e3:22:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FD:EA:98:FE:D2:FE:E9:4C:45:A8:9A:D5:98:B7:9E:12:E2:EB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl

            X509v3 Authority Key Identifier:
                keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:78:6a:61:48:21:e8:b1:72:7a:a2:8e:bf:6e:ff:0d:54:
         12:8a:64:d2:62:7e:54:38:60:22:cd:7f:5c:51:c6:44:79:e7:
         a9:25:33:06:54:3b:78:f5:a0:c9:fb:00:f3:28:bf:bd:be:68:
         7c:3f:e3:64:c3:5c:b7:c6:a6:b9:99:30:30:46:50:1f:d2:63:
         46:42:ee:91:72:ca:47:50:21:17:86:2d:4a:c4:08:1a:78:14:
         ec:16:ed:b7:8c:05:f2:db:3b:f0:42:69:08:ad:5b:6d:ba:98:
         72:5f:53:26:53:df:70:11:ee:69:8e:27:32:ee:d3:2d:13:ab:
         67:21:88:51:af:7b:ea:47:11:30:ab:fa:99:2e:c8:e5:b5:69:
         f6:f5:4f:b4:1c:fd:2d:29:d7:11:4c:69:60:2d:cf:f6:b2:61:
         26:e7:8a:a6:d6:21:57:c4:59:8e:7d:56:37:a0:31:fa:8d:dd:
         5c:85:21:5f:be:aa:85:ae:a6:bc:65:ba:45:de:de:cf:11:5c:
         55:f3:0a:69:7e:e7:61:42:71:1b:e0:24:64:6e:5f:7e:6b:99:
         3d:d5:12:6c:e1:87:fe:9d:40:80:b9:3b:87:3b:ec:f9:ac:4d:
         f7:30:c6:d8:b6:69:d8:43:93:0a:8b:a3:44:72:8a:19:7a:56:
         e9:91:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:56:31 2024 by rpki-client on console-fra.rpki-client.org