Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
File:                     ea93ae24-34e7-3c83-9477-44557229880c.roa (raw, json)
Hash identifier:          hjuKGPrwyL0FsW6U13853DMu5Hyxpz4gEeKzxf7P/go=
Subject key identifier:   66:CD:D6:16:D2:25:DD:59:6C:7B:CC:1E:80:3C:7B:63:06:A7:3D:C8
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F43285845B7DC4DF1DBDD60F16A4C9780
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
Signing time:             Tue 30 Apr 2024 14:22:53 +0000
ROA not before:           Tue 30 Apr 2024 14:22:53 +0000
ROA not after:            Mon 29 Jul 2024 14:22:53 +0000
asID:                     20237
IP address blocks:        192.103.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:dc:4d:f1:db:dd:60:f1:6a:4c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Apr 30 14:22:53 2024 GMT
            Not After : Jul 29 14:22:53 2024 GMT
        Subject: CN=91bb6991-60af-4006-a6ac-2c7ab8847608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:e5:55:6c:19:55:e1:73:a4:a7:bf:78:92:
                    a9:85:97:80:83:b0:c9:dd:1e:68:5d:45:73:ac:e3:
                    1a:c9:6a:e7:27:e8:49:af:ec:6a:b3:7c:3a:15:24:
                    e7:a3:44:52:20:47:29:34:61:06:8d:bc:79:e9:87:
                    a5:52:0d:15:bb:1d:f2:da:0d:c9:bb:6d:bb:36:17:
                    d9:e7:b1:19:69:1a:43:4d:df:6d:84:f1:92:11:c0:
                    79:f3:0b:d8:42:0b:14:50:da:94:e0:4c:f6:45:ce:
                    1e:5a:d9:0e:69:9b:1a:a0:8a:70:7b:83:e1:bb:70:
                    75:4a:11:e7:17:d9:7f:9d:15:08:5f:62:53:5d:f9:
                    d2:b6:a5:ba:22:a7:83:e9:e3:d0:ea:69:5b:09:79:
                    23:8e:66:cb:3b:c4:a8:bf:9b:3f:12:f5:2a:c2:60:
                    61:be:ed:3e:de:4b:56:12:02:e3:9b:75:e8:9a:08:
                    4d:25:cd:1a:20:85:cf:b2:89:70:07:6f:83:8d:60:
                    5a:5a:58:6d:e9:3b:ce:b3:ca:91:2a:6f:35:a0:04:
                    3f:99:ab:76:58:dc:24:27:45:ec:42:3d:a4:9a:0a:
                    54:3c:27:18:8f:d5:e4:e8:89:d8:2c:12:8c:4a:ac:
                    98:79:da:43:ce:b5:f5:d9:24:c0:97:9d:21:92:e5:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:D6:16:D2:25:DD:59:6C:7B:CC:1E:80:3C:7B:63:06:A7:3D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:c2:5c:75:f9:f4:82:c6:ef:ce:2e:e9:5f:24:64:ae:ed:
         c4:c5:c8:5d:a2:fb:56:d9:47:2b:a7:d4:d1:5b:21:a5:8d:ac:
         b3:75:76:50:89:65:0e:7b:31:56:93:41:96:e3:94:c8:52:5d:
         15:f1:06:60:03:38:9a:80:b2:17:7c:a9:39:97:aa:bd:25:b8:
         74:28:8a:cc:55:70:24:5b:f1:82:2c:87:aa:20:f0:c2:f8:31:
         a5:0d:8f:6f:a5:d9:60:58:e7:9b:8e:59:bd:af:ac:9e:ad:40:
         e2:a5:b5:f4:58:9b:5e:84:62:8b:0a:f7:07:90:6f:a3:7d:a2:
         58:a1:3f:be:15:f5:ff:3a:a2:99:2f:13:62:40:88:24:56:e5:
         23:9a:cc:a1:23:6e:24:d0:ce:0c:ef:f7:be:57:6b:90:a3:f9:
         c4:55:bf:fc:43:e9:42:06:bf:54:32:d0:46:8f:cd:d4:5b:f6:
         c2:50:25:cb:fe:ba:72:f6:22:21:84:b5:90:03:56:19:89:e6:
         30:dd:35:2c:76:5d:5d:56:08:94:e7:a7:78:45:9f:d4:a8:8b:
         67:a5:b8:ce:df:a4:80:6d:15:ad:83:6f:2f:3f:28:6d:0f:4e:
         34:88:d9:5d:fb:33:73:70:49:6c:a9:61:f2:3a:23:f3:b6:e8:
         a1:0e:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:54:30 2024 by rpki-client on console-ams.rpki-client.org