Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa
File:                     9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa (raw, json)
Hash identifier:          7T0v/dEt6/xTr31KdDOCX6TuBK7KRsoGX81QlGScQE4=
Subject key identifier:   72:3C:BA:34:1E:BE:36:EC:EF:40:D1:03:08:E7:A4:C5:BD:3A:F3:C9
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F43285844E7D540837C20E6779519A200
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        204.8.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:40:83:7c:20:e6:77:95:19:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=952ecb92-2c0e-42be-8be7-1cdcd9a89baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:f6:97:47:4f:97:67:29:4a:c9:93:d2:f2:
                    36:c8:11:ac:26:e2:00:07:ff:55:d2:de:a4:32:db:
                    3d:d4:20:d5:e5:f1:24:a2:6b:2b:29:1b:13:86:38:
                    43:48:74:48:cc:12:76:d1:87:f1:36:67:b5:49:35:
                    b0:cb:37:dc:b1:28:40:7f:b3:f6:ac:c6:e4:30:17:
                    11:38:1f:96:f3:b9:cc:3e:96:70:59:60:10:0e:ed:
                    68:c2:86:1b:0a:d9:17:92:5a:e1:73:3a:39:cc:94:
                    52:72:87:ee:22:d7:bb:fb:71:22:88:c4:53:b2:24:
                    72:fa:63:26:7e:ff:23:e6:08:ac:8f:75:67:ff:b7:
                    1a:d3:45:74:4f:9e:5f:fa:bc:2b:1f:44:1e:38:67:
                    9c:f5:52:6e:0f:bb:6b:43:65:c0:19:80:37:06:18:
                    f4:49:78:d4:88:d6:91:48:73:fb:01:03:8c:d3:a7:
                    aa:5d:7a:b5:0e:85:c7:1c:c7:34:88:c9:a6:79:c9:
                    48:bd:d7:86:7f:a9:56:f4:81:fd:8f:ec:cf:6c:ab:
                    1f:c6:aa:d1:74:9e:40:d6:3b:17:3c:c0:8f:b3:a4:
                    c1:17:8a:24:c9:61:a9:16:98:aa:d0:45:21:ed:9f:
                    da:74:d8:9c:d9:1d:05:50:00:60:a5:b7:b7:82:2e:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:BA:34:1E:BE:36:EC:EF:40:D1:03:08:E7:A4:C5:BD:3A:F3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:63:da:8e:ac:ab:32:80:24:61:db:0e:6c:66:78:41:22:
         97:f9:7b:13:22:88:dc:a9:fa:aa:d7:c7:6a:35:8c:6c:e4:86:
         74:72:eb:26:bf:6e:f2:b3:32:fe:69:98:a2:d8:d8:b1:3c:92:
         f8:f8:1f:9c:7c:42:2b:02:f7:38:26:df:27:3f:c6:c6:8f:17:
         75:9c:2a:4a:7d:01:bc:fd:4d:47:10:aa:98:62:16:1b:0f:81:
         aa:4f:c6:32:62:e4:8f:ba:a8:56:28:31:81:b4:02:21:cc:80:
         89:90:a3:08:c0:a9:3d:1d:9e:0a:40:28:b1:41:0c:dc:88:bf:
         81:ab:04:15:b6:0d:9e:ba:e4:c9:8c:14:4e:87:3d:e0:17:2b:
         32:1d:b6:01:81:26:73:9f:43:82:5c:86:9c:63:01:fd:ad:a3:
         e7:e8:d8:dc:3a:24:34:c0:d5:d7:76:7c:a3:1a:51:33:4d:f4:
         1f:0a:cb:14:77:dc:4e:53:26:1e:80:78:d8:cb:80:aa:99:38:
         df:b7:59:78:e0:d4:d4:92:d0:fa:75:be:46:22:00:b2:af:34:
         f8:6c:31:d2:ca:4b:97:bf:6b:a4:e3:78:2d:6c:6c:c0:8c:28:
         d9:d8:e4:ad:88:2c:e9:9c:6a:61:0a:cb:78:ae:51:c6:78:7f:
         dd:3b:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:08 2024 by rpki-client on console-ams.rpki-client.org