Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
File:                     33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa (raw, json)
Hash identifier:          smlFKNfBCpRRk01WyC59pcu9Qfx4gxktggSPeDx4rkg=
Subject key identifier:   A5:E1:13:7F:D3:18:E5:0F:A7:05:D6:5A:3D:D9:50:85:C2:17:67:C6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D876E41EFCDF4D045D8EC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     18798
IP address blocks:        216.222.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:76:e4:1e:fc:df:4d:04:5d:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=85139f1c-8240-4fed-917a-d68c4d19c24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:cb:ee:7f:b4:78:1d:1e:ac:36:dd:d1:bd:
                    08:61:35:99:5b:c2:c8:59:43:5a:8e:ad:9a:c8:c9:
                    61:27:93:41:78:b0:bb:3d:14:db:76:a6:ed:60:12:
                    84:0a:12:f2:4c:e8:1d:d2:20:46:9f:6f:28:b7:73:
                    15:1d:a7:2b:18:03:90:b9:cc:81:5c:74:cb:bf:95:
                    23:42:23:51:1f:61:f9:63:c7:0a:39:f2:f0:9f:38:
                    ac:55:68:df:7d:0c:96:ef:3f:5c:13:99:3f:b0:79:
                    16:ca:33:1b:a8:22:81:ac:e4:b4:78:2e:d8:ee:7d:
                    5b:83:e1:94:77:ca:0e:b0:82:94:91:17:a0:35:9f:
                    42:99:05:ee:9a:25:39:47:00:d0:d1:10:71:2b:83:
                    fb:bd:54:b5:1f:38:3a:aa:16:86:09:e3:31:5c:22:
                    47:57:23:1c:e6:38:2e:3b:34:3d:22:10:70:cc:a8:
                    78:e2:86:58:28:99:56:23:d7:47:0c:df:12:12:4f:
                    49:5b:c6:e6:67:8b:29:56:3e:3b:11:dd:51:a2:92:
                    53:f7:3e:b8:59:8e:be:84:ef:25:5e:f2:73:46:29:
                    b6:62:42:f2:86:ba:c3:84:ba:52:18:1b:e1:c4:ba:
                    fe:25:9b:15:ad:d2:42:b8:93:87:b1:be:3e:9c:98:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:13:7F:D3:18:E5:0F:A7:05:D6:5A:3D:D9:50:85:C2:17:67:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/33977f8c-8641-3e7f-ae17-8b45a94fb4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:c1:b7:60:ee:28:0d:af:a5:59:2a:fa:c4:e9:a4:98:1a:
         b1:ae:26:db:2d:9f:29:05:e7:61:23:f5:7e:32:ee:82:17:90:
         c3:29:35:d4:32:68:f4:48:30:6d:cb:70:43:b9:1d:04:b9:63:
         0c:36:e7:74:d4:c9:55:c1:c3:07:d9:27:ab:d5:c6:86:9e:62:
         29:51:d7:3c:76:29:04:c6:a7:2d:b7:4b:1e:e7:84:69:1c:72:
         05:3c:43:b7:14:09:24:56:53:58:22:a0:c8:59:e7:d5:55:51:
         a9:6c:75:50:fa:93:fa:b5:72:2d:0b:36:80:e1:a1:4b:e5:91:
         85:15:8d:61:97:ec:c6:c8:d8:cb:69:84:06:90:2d:f1:28:a4:
         52:0d:2d:f3:2b:04:11:7f:2b:52:39:e7:c6:e2:c0:a0:dd:33:
         49:8f:4a:42:24:f0:92:95:fa:f6:47:c9:ad:b9:9b:cd:dd:50:
         d6:e5:ee:5c:0a:61:5a:69:e2:06:38:1b:a1:a2:61:f3:fd:fd:
         0d:84:b9:f8:e7:91:13:1d:ab:d6:33:5d:c5:3c:0a:ab:2e:b8:
         f8:75:74:e8:fe:4c:40:c8:2a:e6:c8:b3:f2:3e:ed:f4:6e:fe:
         63:a9:67:c6:03:76:b3:1b:14:e5:05:29:d3:ae:7e:59:42:9d:
         ed:ed:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:33:15 2024 by rpki-client on console-ams.rpki-client.org