Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa
File:                     fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa (raw, json)
Hash identifier:          FW6w4ELquitPxJ90UOlThPoJ22tG6N9fD/xZmKVhQGo=
Subject key identifier:   60:EF:FB:4F:0D:37:77:E9:F6:BB:8B:05:35:5E:18:C5:D6:EE:A6:44
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285845A15E0C836F30EE5E15E0C600
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     31898
IP address blocks:        161.221.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0c:83:6f:30:ee:5e:15:e0:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=d2d8502e-0fd0-44ae-a187-bbd4b240cab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:6a:c2:43:22:4a:d9:e4:8e:62:f5:ee:1f:
                    b8:76:cc:bb:61:af:92:9a:22:3b:bf:30:3c:10:9a:
                    db:ad:d7:86:39:c3:1c:7a:d3:a4:4d:2b:8b:db:aa:
                    dd:a1:84:bc:9c:10:44:7c:28:ef:29:8b:77:f4:b2:
                    aa:d8:a5:d6:f9:7e:e0:ce:8f:00:9d:19:32:06:35:
                    f9:68:0b:ba:de:8a:3b:8a:f9:4b:5c:76:7b:4d:9f:
                    a5:45:c5:21:59:12:c0:2d:56:10:a7:2b:63:5e:7e:
                    76:27:3a:32:8b:fa:5b:89:ee:df:d7:cc:c0:8a:85:
                    6d:83:c9:18:c8:09:c6:2e:af:7c:f5:7b:0d:ca:cf:
                    05:9d:c3:b8:1f:70:69:7a:15:f4:0f:a7:02:7e:fd:
                    3e:88:63:66:03:f1:5d:dd:e6:7e:92:92:04:a8:72:
                    ed:f5:52:63:37:5e:ac:f4:18:83:1c:dd:71:1f:f5:
                    74:40:6d:10:8d:f4:8f:21:6d:0b:86:af:45:07:76:
                    12:7e:97:83:f5:40:6b:ba:96:64:cc:d9:7d:c7:28:
                    45:65:66:d7:6a:1c:a5:fe:1d:7b:e9:90:35:c2:ab:
                    67:b9:3f:69:1a:37:b8:b8:81:4f:52:56:09:c6:2f:
                    f9:e2:e3:b7:0f:40:53:1a:29:a9:82:6c:96:79:1b:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:FB:4F:0D:37:77:E9:F6:BB:8B:05:35:5E:18:C5:D6:EE:A6:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:df:84:0f:53:6f:55:17:c7:3c:32:b2:fd:97:3b:64:fb:ea:
         b3:5e:35:ff:5d:d2:a9:94:23:3f:99:d2:75:cd:64:ca:f7:cb:
         36:53:92:cd:dc:21:31:16:06:29:4d:70:9d:9f:21:df:ae:06:
         b3:12:5c:23:3a:7d:f8:f2:ec:23:d8:71:25:4a:ab:05:81:a8:
         c9:77:06:2b:60:e9:b5:74:53:95:5b:13:cc:7b:4a:0f:1e:2b:
         f4:cc:d6:28:bb:fa:9e:b0:b8:e2:24:82:97:2e:33:db:b2:22:
         95:3d:c1:57:f5:fe:cc:53:8b:98:f5:f6:c3:d9:27:8a:98:51:
         dc:d0:54:33:72:52:52:77:eb:6f:25:05:fa:e7:de:1a:a2:5d:
         e2:c0:89:2b:24:dc:ea:e6:6a:4f:bc:60:e0:68:42:87:f9:89:
         ad:69:ec:fa:a7:5f:2f:99:82:ac:1f:d0:4c:f3:e4:c2:7a:c3:
         4c:a3:71:7c:79:58:60:c5:34:9a:1f:4c:9f:24:23:23:28:b9:
         14:c3:f5:6f:02:52:f4:2a:76:ac:14:f5:5e:0e:82:c5:58:21:
         ac:e8:ec:47:8c:55:9b:8e:49:1c:34:3f:c5:12:0e:ad:c9:95:
         d7:33:6b:3a:fb:a9:3f:69:f3:c3:fb:58:dd:46:d6:86:a4:25:
         d0:dc:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:03 2024 by rpki-client on console-fra.rpki-client.org