Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
File:                     55304d86-38bb-30a6-9c19-973accc138e1.roa (raw, json)
Hash identifier:          amHcwqYhjq49xrLFB7IBbRExL5H2Tgg/34Til/P250s=
Subject key identifier:   6B:04:E1:17:21:6F:80:AB:98:E8:53:88:AD:DA:C0:60:5A:4B:40:BE
Certificate issuer:       /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Certificate serial:       010D0C9F43285845DEC9104C9BC6F3F9178C2600
Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        208.94.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:10:4c:9b:c6:f3:f9:17:8c:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=c6bbefd6-bc33-44cb-86cd-74278dcd8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:9e:94:ee:fa:10:31:4e:be:fb:bd:e0:af:
                    36:79:a6:d6:ae:85:11:e2:9e:c0:56:b9:d0:03:f3:
                    07:bd:1c:a8:a8:10:2d:cd:98:4f:15:24:f2:0b:5e:
                    07:d0:03:5c:5b:ba:42:44:12:66:9b:c8:12:58:06:
                    b3:df:a7:66:c9:23:02:c6:27:99:3e:f3:ef:41:95:
                    16:20:5f:0f:aa:bf:6a:c5:ad:d5:e4:1a:b6:cc:d8:
                    df:ae:2d:82:d9:b3:3d:08:aa:22:ca:4c:c3:4a:14:
                    51:09:dc:9e:75:39:69:82:d8:58:04:9b:06:20:b6:
                    4a:ce:ef:92:08:c3:15:56:a7:78:32:62:6e:07:b6:
                    a4:e0:9a:94:cd:78:a2:e6:39:0b:ec:05:61:ac:0c:
                    e8:f5:00:9e:0f:a3:cd:f3:a0:e2:1e:a0:28:40:25:
                    03:3f:af:3c:a1:13:ea:9b:a5:50:88:30:ee:18:db:
                    87:ee:85:d9:e8:53:b6:66:3b:0a:b3:2a:0a:0a:35:
                    50:a3:88:57:b5:55:d6:0b:f2:56:d6:3d:11:42:1d:
                    47:c2:d4:18:c1:05:85:01:a2:36:d1:8c:b9:6f:fa:
                    b3:da:5b:71:83:08:48:c6:f7:f4:12:d1:24:8a:2f:
                    49:60:77:a5:67:79:40:f3:00:28:b6:29:db:19:ef:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:E1:17:21:6F:80:AB:98:E8:53:88:AD:DA:C0:60:5A:4B:40:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl

            X509v3 Authority Key Identifier:
                keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:7a:e1:a9:f2:76:c2:dd:83:e8:9f:9e:26:27:40:45:6f:
         6e:aa:09:28:f3:00:85:3b:bb:c2:66:20:c0:07:67:b0:1b:8b:
         68:19:09:64:3a:2a:ba:e1:95:ad:82:d2:a5:5e:f8:92:d5:e5:
         f0:0a:6f:48:b7:8e:91:8a:03:01:1c:6b:89:0c:7d:ff:3f:3b:
         6d:56:e9:2e:3b:fb:80:d9:a2:f1:05:00:08:73:80:94:3e:f1:
         9f:03:b7:c5:7b:f8:20:62:80:5a:1e:29:ab:f0:9e:c8:d6:68:
         92:2f:be:d1:eb:9a:6c:4b:61:7b:f2:0a:f6:77:00:68:0a:b5:
         eb:45:5d:84:00:7d:2b:6c:9b:84:51:04:92:bd:7f:4c:c3:90:
         41:2e:71:22:1d:f4:f2:9e:ff:6f:ea:ce:12:d4:26:c1:f4:28:
         5e:4a:08:19:a4:51:02:63:86:3f:3f:69:c3:89:e6:be:f5:0f:
         e6:55:9b:85:96:8f:34:72:2b:cc:80:ba:1f:c0:a6:54:ed:89:
         55:e6:df:3d:0a:cb:84:de:9f:cd:06:58:04:57:e8:cd:17:d5:
         a3:35:d3:18:70:6b:55:ef:d0:c9:9f:b0:51:50:c6:59:90:09:
         dc:3f:44:0b:6f:ed:02:8d:56:9f:72:79:22:9d:08:e6:ce:9a:
         09:b3:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:48 2024 by rpki-client on console-fra.rpki-client.org