Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/9b7f4b2b-2c2a-3c90-88b6-6f2d86b7bcb8.roa
File:                     9b7f4b2b-2c2a-3c90-88b6-6f2d86b7bcb8.roa (raw, json)
Hash identifier:          syJl4YR6+ktznQtCd4ts6FyoCohnKNYn3XUv2e1eLIA=
Subject key identifier:   9B:E7:15:3F:1D:AC:C1:26:2D:34:3B:2B:5A:DD:31:A3:67:35:BE:15
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F432858456822E59CA26645BB8099ABA0
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/9b7f4b2b-2c2a-3c90-88b6-6f2d86b7bcb8.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        212.8.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e5:9c:a2:66:45:bb:80:99:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=47892bf4-e0f5-4710-a757-b63b1d4a7508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:84:9d:4f:24:8a:35:af:e3:dd:c5:5a:91:
                    6f:fe:d3:aa:0c:59:3e:12:31:d0:7a:f2:2a:c6:9e:
                    a4:60:2e:1e:52:a5:b2:65:f0:94:d7:64:c5:a8:44:
                    a1:f0:84:8f:89:69:31:f9:4b:57:19:bb:31:b9:46:
                    3f:5a:52:a2:07:31:64:b1:d6:0b:41:15:87:a6:38:
                    a0:7d:0a:2a:3a:2b:e2:36:92:f0:df:6c:ff:0b:a5:
                    08:10:e0:07:99:db:2a:f3:a8:55:27:98:f5:e0:7c:
                    2d:02:08:b4:2b:14:3e:21:26:ed:5d:45:50:e8:8b:
                    16:51:58:a9:2a:0f:89:8f:bb:60:b7:61:e3:5b:7c:
                    cb:9f:5e:b2:26:78:bd:0f:71:74:8c:6c:04:97:86:
                    44:7f:7b:12:fc:4d:e6:17:f4:d4:25:30:bf:76:ce:
                    48:25:e4:2e:4e:df:6d:5a:48:a3:d8:07:d7:ea:ce:
                    d3:ec:6b:e3:f9:f4:d5:82:f6:a4:95:6f:c7:a4:7e:
                    86:3e:d0:15:25:09:a4:72:cf:cc:1d:b4:92:05:9a:
                    fb:cb:40:58:fd:aa:82:07:d4:bb:39:05:63:81:c8:
                    f1:66:6c:5e:c8:78:d7:00:a8:b2:82:8e:17:35:7f:
                    33:09:dc:46:81:08:f3:cf:e7:c6:e8:0c:9c:e6:65:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:15:3F:1D:AC:C1:26:2D:34:3B:2B:5A:DD:31:A3:67:35:BE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/9b7f4b2b-2c2a-3c90-88b6-6f2d86b7bcb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:fa:d6:f3:e7:5b:43:fc:55:6f:2b:82:a6:85:45:a6:28:63:
         65:a3:0a:79:ef:9e:45:45:e8:be:85:96:ed:a8:25:96:fb:1f:
         8f:b3:d5:97:db:2c:b4:01:94:9d:9e:27:71:2c:5b:6d:09:2f:
         09:a1:f0:0a:fb:ff:07:bf:be:7f:e6:38:42:1e:64:0f:87:aa:
         eb:7a:cc:a6:7f:48:01:a2:55:4a:82:1b:40:8b:40:89:49:3f:
         43:1e:38:6b:80:95:c7:72:70:4d:82:bd:83:cd:3a:b7:e6:60:
         b5:02:53:af:74:52:7d:28:e6:61:ae:2d:c1:30:87:58:57:be:
         56:07:e0:44:2b:18:53:eb:30:5f:da:37:40:f6:10:d4:c1:20:
         f5:ce:3c:7e:42:72:86:0c:68:1b:95:c8:e5:4c:58:51:40:d3:
         3f:72:45:84:3b:0c:d8:6f:75:4d:e8:9d:aa:39:00:74:4a:dd:
         60:ae:bd:74:1c:bf:33:ff:f7:09:f3:9e:ad:01:99:c3:74:ec:
         b5:39:9c:45:75:fb:56:fd:68:a0:cc:d2:c5:af:e9:ef:ac:ef:
         24:81:bc:bd:65:5c:4e:51:d6:03:3d:7d:74:25:58:db:77:b0:
         10:38:21:fe:a7:dd:aa:40:36:07:e8:5a:1b:c7:8a:72:17:22:
         dd:1d:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:28:29 2024 by rpki-client on console-fra.rpki-client.org