Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa
File:                     a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json)
Hash identifier:          MtHEhKVfU+I/byEKlAxsKWIe/VF1YSGff3Tkk+Mf0k8=
Subject key identifier:   0F:39:C2:F7:C2:00:9E:BE:38:D2:C7:32:23:58:EE:37:F0:27:17:C9
Certificate issuer:       /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Certificate serial:       010D0C9F432858450ABAD319884B3A2336257A00
Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     8075
IP address blocks:        208.90.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d3:19:88:4b:3a:23:36:25:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=c6b7cbc1-5801-494c-ace8-98b82a47dd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:7f:d7:de:57:dc:ed:9f:f8:95:19:b5:79:
                    91:ba:ef:b9:4d:cd:00:a1:03:8d:82:0e:d6:e2:5f:
                    3c:09:e1:e5:3d:f0:d9:6e:bb:ad:e2:bd:dd:03:f1:
                    f8:63:75:e9:09:97:f8:f4:ef:ed:58:da:a2:1b:e4:
                    4e:a4:88:79:d6:b7:97:0a:ab:39:16:a9:85:5a:07:
                    2d:95:a2:0b:c1:6f:b9:1c:b3:1b:64:32:e4:3b:7b:
                    7a:5e:be:9a:48:1b:7b:c1:50:7d:9e:87:e5:a7:36:
                    df:8c:fe:6b:7d:96:10:de:3c:fa:f6:ef:3b:cf:8e:
                    83:e8:3c:7f:06:b8:2c:a3:61:de:d9:85:46:23:a3:
                    f3:6b:09:8b:d6:30:c4:7c:e2:7e:29:38:d8:a1:15:
                    b8:a3:24:c6:8c:30:28:92:5d:b1:a7:6d:64:89:03:
                    d3:29:c6:27:43:fb:39:2a:03:a9:4c:b9:62:29:cb:
                    ba:2a:96:2c:b7:5c:67:f3:ae:a9:45:24:75:e4:6b:
                    fb:e3:64:52:48:0e:8e:e3:e9:b9:09:a2:2c:12:c7:
                    bc:17:a4:b6:69:bf:ea:18:57:5f:2e:2b:da:e4:07:
                    1c:47:87:14:43:22:77:6f:ea:11:bf:c9:23:eb:2c:
                    a6:aa:1c:ef:a4:00:49:0b:15:04:7d:c6:41:e0:28:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:C2:F7:C2:00:9E:BE:38:D2:C7:32:23:58:EE:37:F0:27:17:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:40:e6:9d:d4:42:d4:8e:6c:96:8e:0a:74:13:ee:cc:6a:42:
         d4:2a:a5:50:9a:e0:83:3f:ca:19:0e:63:40:38:e2:af:ea:7e:
         e8:a7:ce:36:04:2e:45:80:1f:d1:48:fe:2e:92:97:96:69:74:
         a9:d8:f1:66:01:51:5a:88:1a:ae:b1:52:93:f0:4c:e1:8e:b7:
         dc:7c:c8:3a:24:49:a5:00:b7:7d:f1:e4:8c:86:d7:c2:df:b3:
         56:90:1b:d8:51:72:f9:58:b6:ae:76:c8:b9:95:d7:2f:bd:3a:
         66:ca:fc:bf:08:49:70:2f:cb:1c:41:fd:e4:11:f0:dc:ac:fc:
         1f:96:2c:83:00:d8:b2:99:95:5e:a5:3b:8c:66:85:29:ab:78:
         75:48:03:a4:4f:a0:db:64:af:61:b7:88:6d:4d:62:c3:7a:98:
         28:80:90:5a:32:4c:bf:6a:b7:9b:5d:d6:0d:c9:74:df:b8:b9:
         fe:24:20:9f:af:77:48:76:ea:51:25:f8:d9:74:ac:ac:20:1f:
         f3:59:f4:5f:4c:77:62:30:2e:d8:e7:76:5a:fc:7e:c1:24:83:
         35:d0:b3:48:03:e1:60:62:31:09:1f:e4:5a:ca:ce:82:97:87:
         77:59:9a:43:61:1f:af:30:bf:ef:1a:af:e3:17:6d:82:96:62:
         77:0b:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:41:07 2024 by rpki-client on console-fra.rpki-client.org