Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa
File:                     a19e3195-8a84-3cd1-96c4-4347391db867.roa (raw, json)
Hash identifier:          6ElOzpiDh9rQJFC+XCeLFVQ1Z0T81i0j5rxbi+qt1Lw=
Subject key identifier:   E9:EA:D3:FA:0B:5A:F7:28:E5:C4:3C:2C:87:50:66:92:DC:67:8B:85
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F43285845B4E8DA80DA831C8F23892F80
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     8075
IP address blocks:        162.254.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:da:80:da:83:1c:8f:23:89:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=9c4beabf-6490-4e47-a649-d7c7a796c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:82:a7:a0:aa:14:92:e0:89:7a:b9:62:c9:53:
                    75:d7:f4:4b:8f:d9:d6:61:01:21:f4:6c:8d:94:c6:
                    3a:9e:75:06:c2:4e:00:6d:f1:42:8a:a9:ed:29:91:
                    b3:42:ce:15:ab:6e:fc:59:3b:49:7e:83:3b:58:d3:
                    fb:b6:60:5f:2f:7c:db:01:c6:93:d3:b9:f1:13:77:
                    73:b4:ee:22:98:de:77:f8:36:3e:30:88:84:26:90:
                    73:30:c0:06:05:ca:c6:a8:64:d5:d2:8f:3c:13:57:
                    7c:de:8b:b7:f3:13:88:ed:26:0a:78:0c:d0:74:5a:
                    27:e3:0c:46:94:5a:a7:58:b8:45:17:07:65:68:47:
                    62:c9:76:37:de:4a:50:cb:21:fe:8c:33:92:7d:bb:
                    90:4c:15:1b:a3:da:5f:d5:90:91:77:65:58:cf:e0:
                    87:3b:4b:df:a6:6e:90:69:8f:c6:a7:dc:e2:9e:60:
                    f1:6e:4c:37:ae:32:2e:85:8f:a5:16:33:81:31:da:
                    c5:12:4b:42:ac:cb:7f:d9:8b:5d:40:78:ca:58:05:
                    d2:2f:89:25:ae:e9:e0:49:12:81:15:32:e4:79:e0:
                    6a:69:b8:c5:09:d8:9a:fe:64:f1:a8:dd:23:fb:48:
                    dd:15:43:6a:48:1c:76:12:0c:c6:57:4a:e0:6d:fd:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:D3:FA:0B:5A:F7:28:E5:C4:3C:2C:87:50:66:92:DC:67:8B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:6c:2a:85:b7:60:ca:5e:6a:c4:e3:ae:e6:fd:48:38:b2:
         2d:49:a1:a0:3c:da:d0:85:a1:69:83:5f:9a:d8:2a:27:3b:5e:
         1a:ee:b6:bf:a5:68:b0:43:ae:50:6f:77:a4:50:38:c6:6d:d0:
         bd:ed:23:85:cc:6f:83:63:10:bf:2e:19:1f:2b:1d:ae:b5:86:
         af:d3:4b:04:c4:c3:a3:eb:bc:4a:5a:ec:49:a4:ea:40:e3:93:
         fb:bf:a1:19:a0:9c:fe:3c:8d:17:3e:d2:23:c1:23:f7:13:47:
         55:23:82:53:3f:c3:e9:95:6e:7c:8f:82:be:50:57:e1:8e:d8:
         f7:c6:86:fc:e2:3e:38:93:38:6e:33:71:60:8a:79:e5:5a:cd:
         84:b1:1a:8b:53:a9:ef:4e:f9:62:84:d6:5f:ac:41:d0:4e:7a:
         fb:e4:94:63:53:35:59:21:cb:61:fa:72:2a:9f:47:be:74:20:
         0c:25:b2:d5:7f:dc:7c:79:1d:14:c5:a1:c4:a4:9a:8f:11:0a:
         65:c6:dc:66:49:12:b5:56:c7:32:9a:ce:b1:1f:20:41:89:5b:
         29:e0:17:1b:b0:0f:75:5f:39:99:8b:71:e7:e9:ec:16:37:47:
         e5:21:61:1a:e6:1b:6c:59:9c:d2:8e:9f:b3:47:1f:e3:ed:83:
         31:75:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:03:24 2024 by rpki-client on console-fra.rpki-client.org