Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa
File:                     b22e9d94-d361-3493-8487-039bd5b943fb.roa (raw, json)
Hash identifier:          N4p4uYkjq6IjmT0m078PAE2cQSXEXHVTPfMQVl4/9uU=
Subject key identifier:   FE:67:30:8A:43:24:3B:2D:D4:D3:AC:29:53:FC:7C:E3:45:7C:16:F2
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F43285845D503CF963BADE8BE85CF5240
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     8075
IP address blocks:        208.103.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cf:96:3b:ad:e8:be:85:cf:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=de8935b5-d5ab-496e-b06c-65d85c1d0236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:ff:ac:38:15:68:a7:47:96:07:62:63:53:
                    00:ff:71:83:e0:2a:fc:e8:01:49:c7:62:8b:5d:a4:
                    79:8d:3f:3e:2d:7f:cd:db:6f:e0:b1:a0:12:dd:8c:
                    e0:f4:92:59:ef:21:a2:9a:c8:4c:f7:46:ef:a8:1c:
                    da:ff:02:60:2b:e0:c6:07:53:b4:ab:62:8e:2f:33:
                    cc:a8:a2:3a:17:f3:a2:83:3d:8e:53:58:dd:77:10:
                    79:85:d1:58:28:47:37:1f:46:14:72:0c:eb:65:42:
                    2c:c1:80:31:f4:31:37:ad:fe:0b:fa:6d:69:7a:8c:
                    3b:bb:0e:e2:80:d0:43:0d:64:25:2b:1b:08:e4:dc:
                    73:47:7f:6d:ec:40:78:6b:b5:95:44:b8:ac:46:67:
                    d5:8c:51:92:44:46:06:94:42:da:19:62:ea:3e:67:
                    3c:42:3f:3a:cd:fe:39:1e:f1:8b:85:01:26:10:82:
                    fd:4e:e9:d8:fb:d5:40:9a:28:83:2f:51:83:2e:ab:
                    17:ca:27:99:a7:e9:74:b4:aa:60:68:e9:51:dc:f9:
                    94:f9:27:cc:e6:45:7d:66:d7:e5:86:1b:62:b0:d8:
                    52:91:3e:a1:cd:e1:cf:a0:ce:bb:3c:13:79:3f:f8:
                    f3:64:83:17:39:8c:29:45:8f:65:b1:b0:8a:e4:62:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:67:30:8A:43:24:3B:2D:D4:D3:AC:29:53:FC:7C:E3:45:7C:16:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:a3:f5:42:aa:e8:29:90:78:3b:b4:0e:18:4d:d3:19:af:
         0b:9e:05:f8:79:94:a4:60:3d:05:08:7b:c6:ba:cb:c1:f5:a0:
         8e:37:1b:7a:f7:39:69:98:7f:43:22:67:6a:f9:47:22:13:c5:
         66:14:fe:57:08:a5:2e:6a:2f:09:90:3c:7c:93:c4:c1:da:87:
         d2:4b:22:a2:38:03:bc:d6:fb:e8:21:41:99:a2:e6:e8:2b:97:
         f5:ce:41:16:11:28:36:6a:54:5c:1c:5d:41:43:bf:82:3c:4d:
         3b:43:7e:9f:2c:2a:ca:5d:0f:34:61:45:8c:fe:3e:65:97:62:
         ed:71:c6:a4:52:fa:fc:db:41:bf:eb:99:15:61:f3:e9:c5:ee:
         a6:12:62:06:db:63:92:a3:42:8d:6f:de:4c:8d:ab:67:0d:ed:
         e5:e8:03:ee:d6:59:db:09:7f:92:06:62:72:c3:39:f4:c3:bd:
         e8:44:6a:83:2b:f8:78:19:b7:3d:e5:4b:7d:4d:d3:4b:13:b2:
         29:f7:e1:26:b3:71:35:ce:93:b2:a0:1e:ac:af:8b:9a:10:07:
         e2:52:33:fc:5d:31:7e:75:7f:61:d8:c6:35:df:82:81:e7:dd:
         44:f4:50:f7:51:31:9e:6c:59:a4:df:e8:71:f0:8f:d7:96:69:
         43:9d:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:35 2024 by rpki-client on console-fra.rpki-client.org