Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa
File:                     0568fe72-18f4-3078-87af-4c1fec2146c9.roa (raw, json)
Hash identifier:          MbhGuM8LfP556/5ydyzcd+14lB73yMNhr/BL31i9Xoo=
Subject key identifier:   40:82:AB:D6:AD:43:7C:0F:A0:1E:68:6E:87:3E:CB:BC:F1:1F:55:69
Certificate issuer:       /CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7
Certificate serial:       010D0C9F4328584551CD6B702AFC19137CB60840
Authority key identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     8075
IP address blocks:        216.126.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6b:70:2a:fc:19:13:7c:b6:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=0614098e-f2ee-4993-a2d5-ef88ba5443cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:25:af:a4:d5:5f:77:56:5f:14:32:99:50:
                    1c:f9:8b:d7:6f:6c:07:97:42:b7:8a:4c:e5:ec:34:
                    df:96:1f:25:4f:ba:c5:05:a9:b1:9a:e8:5e:b5:a7:
                    40:1f:4b:0d:5f:6a:fa:ce:67:ec:2b:3d:6e:b8:ef:
                    54:cc:78:4c:38:07:8b:7f:99:94:aa:23:c0:2d:63:
                    0c:2b:c7:6c:04:4e:57:b5:be:d7:4f:45:20:b7:2a:
                    1d:45:6a:b4:18:07:d8:e1:dc:c8:97:7b:21:da:06:
                    f3:59:e6:54:d4:12:3d:0d:e6:de:dc:f9:d6:28:d7:
                    dc:40:8a:c3:c2:36:14:82:58:8f:9f:39:72:4e:9a:
                    80:bd:a4:72:45:1b:13:12:d3:80:ed:1b:dc:bc:76:
                    df:47:a1:6f:0c:8a:11:bc:78:a2:5b:94:46:d3:d3:
                    a5:d3:29:62:5c:cf:c9:5b:b0:fe:8e:d4:c1:39:ed:
                    3e:d4:43:3e:a0:92:ae:a6:be:cf:90:a7:d7:03:ad:
                    27:04:be:55:ce:bd:a2:d6:93:bf:e8:17:4c:c8:71:
                    2f:82:8d:be:8d:e7:89:12:82:e3:71:db:e4:e5:1f:
                    67:4b:cf:48:2e:58:13:32:79:71:31:08:5e:0c:09:
                    e7:6a:94:ea:9b:a6:67:ca:2d:4b:33:25:32:8e:39:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:82:AB:D6:AD:43:7C:0F:A0:1E:68:6E:87:3E:CB:BC:F1:1F:55:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:a4:84:f5:d4:30:2e:9f:31:9d:82:04:4f:bc:9e:26:57:
         94:c1:6b:ab:a2:a8:10:72:a7:47:1f:ec:f4:d6:b9:ac:34:58:
         75:fd:3e:2d:56:4a:4a:76:f9:bb:04:3b:10:c6:42:cd:ac:d2:
         5d:19:ba:91:ed:c9:00:6c:86:d5:75:40:9c:4e:25:89:52:e9:
         f4:33:62:b0:db:a7:2c:ba:30:56:9b:51:ed:09:5c:81:76:a2:
         08:f6:30:8e:75:71:63:fe:32:13:ed:98:4f:a2:c9:b4:be:0e:
         33:02:7d:64:06:b8:bd:22:01:20:4f:1f:1a:e6:dd:4a:b5:67:
         06:84:ec:a9:aa:75:e7:b5:46:2b:70:11:c7:a6:44:a1:00:b6:
         10:99:3d:e7:31:2b:88:d5:ec:95:60:2f:b4:b9:75:38:98:f3:
         ea:df:70:7d:2f:1f:07:bc:a5:aa:a8:3a:02:d8:df:90:50:08:
         f8:9f:86:c3:96:0f:3b:14:d6:bc:d3:d4:ec:91:65:c1:bd:f3:
         77:9c:23:38:67:cf:8d:a8:db:0b:0f:bf:dd:43:3a:e7:9a:35:
         c8:09:e1:c2:93:67:96:ba:5a:cf:fe:2b:05:fc:e0:ba:22:aa:
         c3:54:c4:10:59:1c:ba:f5:dd:b6:06:ba:df:c0:80:16:e6:a9:
         08:ea:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:14 2024 by rpki-client on console-ams.rpki-client.org