Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa
File:                     c873bb50-4bd1-3766-8c93-abb4b0657cac.roa (raw, json)
Hash identifier:          T7kdhpuFIV/p8oM0hjqPPt9xDa/ZHYp9fNStrlo7PGU=
Subject key identifier:   A6:BB:60:96:AB:8C:CC:58:62:C7:69:DE:EA:7D:55:BE:95:42:E9:FD
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF9231AF1ED7F386AFDC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     21570
IP address blocks:        216.191.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f9:23:1a:f1:ed:7f:38:6a:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=f7786c81-65b0-4a1c-9628-a2ad1bb53d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:d1:7f:d9:74:06:a1:ba:7c:6e:c5:d9:d1:
                    d3:6b:35:40:d9:f7:c7:99:46:83:1a:f0:bd:60:9a:
                    3e:28:e1:e3:7e:2e:20:46:46:69:dd:c6:c8:a8:98:
                    dd:d3:e3:64:c1:3e:0e:c1:2e:f0:4a:0f:6f:aa:84:
                    cf:78:0b:c2:d6:95:b7:73:52:e8:62:25:27:39:41:
                    6f:56:89:d4:46:cf:d3:e0:b8:9f:26:d3:9f:ea:42:
                    37:21:01:fc:d5:10:8e:6f:f9:52:02:49:5c:0a:83:
                    0f:d9:30:65:7c:cd:27:15:ab:d9:11:c4:88:d0:14:
                    9a:d0:e6:a2:cf:73:26:39:51:3c:f5:8c:b5:1b:8d:
                    45:5a:9d:33:53:5f:bd:c1:7b:a6:db:f7:0d:b1:85:
                    db:7c:f9:3a:ee:26:21:04:bd:07:bd:7a:a6:c0:64:
                    88:9e:da:8a:90:b1:99:70:6f:e3:a8:4b:c1:33:d1:
                    e5:eb:8a:17:c0:ed:b5:b6:9c:55:c5:c9:2b:e5:af:
                    a6:b5:69:ee:a5:12:32:18:a8:41:47:b4:26:80:2b:
                    d1:c0:71:96:b3:bf:d7:76:ce:a4:7f:b3:e5:b1:d0:
                    69:46:bf:50:62:cf:8e:ed:b2:ce:38:53:7b:63:08:
                    92:d1:66:57:c2:29:d1:e5:65:b1:4d:fa:e6:cd:98:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:60:96:AB:8C:CC:58:62:C7:69:DE:EA:7D:55:BE:95:42:E9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:42:0d:17:56:26:b1:60:ce:13:05:cb:89:fc:c0:58:81:93:
         01:63:7b:50:16:79:40:68:16:fd:e1:e9:25:b6:de:68:9a:e3:
         78:e5:f6:35:a5:d2:44:62:59:7b:62:bd:07:90:3f:1c:c3:bd:
         cf:45:67:bd:a0:8e:33:eb:e8:29:cb:cb:71:e6:44:cc:1a:32:
         1b:f3:39:55:57:99:51:04:47:21:6e:08:0d:a3:3e:ff:d7:83:
         81:84:29:74:ff:5e:74:9f:41:7b:54:37:60:65:46:9c:06:97:
         51:b4:33:12:bb:d4:54:a3:d0:9c:b0:ea:e8:b1:9f:10:1b:0b:
         fd:66:ab:d2:f8:7e:eb:47:30:ed:ba:d4:43:ac:f5:4b:09:b3:
         3b:6f:cf:20:46:9c:42:f8:80:b5:f3:e2:32:f3:dd:71:d5:1b:
         d1:ec:9f:1b:a1:56:78:f8:80:db:6c:51:31:e1:60:a2:d0:61:
         86:79:12:9a:c2:c5:07:18:80:fe:7c:58:ac:b8:40:79:28:ee:
         4d:82:e6:a0:c6:6e:99:a3:c4:a9:2c:19:cc:48:99:ef:6a:d4:
         ff:29:bb:e9:f9:d3:bf:9c:98:79:00:52:25:60:d8:a5:25:82:
         0a:49:94:82:43:76:4e:e2:68:3d:5a:46:70:28:68:cd:0b:c8:
         a7:d8:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:47 2024 by rpki-client on console-fra.rpki-client.org