Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/6152e435-67b2-37b0-b024-79ddd6781fc6.roa
File:                     6152e435-67b2-37b0-b024-79ddd6781fc6.roa (raw, json)
Hash identifier:          ieYcarSiNepbdblQumbkxdaszXvLnu4Dwa07LrHbGhs=
Subject key identifier:   11:F2:F6:86:E2:8D:CE:8C:EA:CD:C9:8E:40:68:E2:C0:28:8D:50:78
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584531B29565FC2C72F3CF8D1980
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/6152e435-67b2-37b0-b024-79ddd6781fc6.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        216.52.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:95:65:fc:2c:72:f3:cf:8d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=c5da650f-d98b-4716-a132-d32c7b2ad1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:c1:9d:11:db:ac:63:18:b0:d0:f9:f5:88:
                    f6:0a:6c:3b:33:23:04:7c:67:06:78:d1:55:08:c3:
                    03:bb:af:e1:d7:24:71:5c:8d:0d:b7:66:81:3e:b3:
                    47:db:4d:44:78:28:a4:43:69:b9:62:c3:7f:e9:2d:
                    74:df:2c:c2:bf:ae:9d:55:ab:ce:f1:6c:a8:64:f9:
                    34:a5:9a:d4:49:c9:78:63:77:bc:73:61:c4:03:5e:
                    c0:e0:d3:93:4c:8e:0e:a8:72:35:71:92:0f:b3:d6:
                    a7:e5:c7:a8:55:d5:51:4d:08:88:49:a8:a7:f9:34:
                    59:30:87:2d:0a:f0:d1:07:d7:ef:32:e9:ad:45:46:
                    16:6e:79:98:2c:51:aa:cd:4e:c0:8a:36:cd:9b:bd:
                    a5:a3:71:c5:4a:02:a7:93:4d:8d:12:02:4d:d0:35:
                    81:69:b1:5e:e1:ca:39:51:29:31:46:b0:94:f9:5c:
                    dd:d4:92:ef:91:be:28:a4:de:00:1d:26:0c:14:16:
                    6a:66:b9:9d:67:4b:5f:b3:f5:b1:f9:29:0a:d7:b3:
                    d9:89:63:d2:5e:9d:35:36:90:c0:17:ca:42:d3:d9:
                    83:a7:4e:83:5b:b7:df:05:fc:c8:cf:69:69:90:73:
                    91:4a:48:f3:24:78:59:90:bf:23:0e:13:06:e7:de:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:F6:86:E2:8D:CE:8C:EA:CD:C9:8E:40:68:E2:C0:28:8D:50:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/6152e435-67b2-37b0-b024-79ddd6781fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:83:de:2a:d9:e6:dc:1b:7b:44:bb:1d:c9:20:85:5b:ee:
         b9:86:79:09:85:9d:df:bb:ce:7c:d7:84:9b:cd:18:27:a6:9f:
         a0:1e:20:e7:e5:b4:b8:08:ef:0f:c4:d4:29:ae:53:09:6e:b5:
         da:38:45:14:c1:94:9d:49:33:f7:7d:da:0c:42:8a:48:39:49:
         81:50:f6:5b:f4:09:e7:1a:cc:0f:26:f2:88:72:3c:5b:51:93:
         a7:b8:4d:1b:39:db:53:c7:0b:09:a7:e7:9a:23:a0:a4:83:a0:
         64:a8:49:49:77:a1:7a:3c:cc:09:81:51:6b:d2:93:9b:ef:b7:
         15:4c:4f:10:52:94:5e:26:17:38:c1:28:4e:43:c6:27:9a:69:
         14:03:45:31:26:ef:fa:79:a7:8b:e1:e1:1b:d7:e2:11:9e:01:
         53:6a:c2:77:82:b5:31:8a:24:4b:05:55:1e:b8:8a:75:df:ad:
         3e:7b:40:d6:ec:47:2d:2d:ab:55:51:80:91:12:da:81:3f:af:
         c5:12:f3:cd:07:f0:10:9e:0a:c2:d0:3b:6e:2b:76:df:57:35:
         63:c7:6a:0a:6b:5a:9e:a9:05:ce:78:e4:c3:6f:8a:1b:2b:f9:
         67:e6:90:f4:7b:a4:42:2d:24:9e:17:4f:88:e8:90:1b:09:3a:
         a6:4e:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:37 2024 by rpki-client on console-fra.rpki-client.org