Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa
File:                     c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa (raw, json)
Hash identifier:          FN3lRNF1axTWE8Qa67/h5iRkz6pZG1rNADwqtarDTiU=
Subject key identifier:   17:8D:CA:4C:BC:DF:F7:AD:FB:FE:D0:95:96:CE:F7:EE:9F:67:9C:7C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858455A2D837FA6AE2EF5F419B040
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397630
IP address blocks:        207.254.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:83:7f:a6:ae:2e:f5:f4:19:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=c984d58c-752b-4661-8cdd-8f8dbb1df59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:d0:43:3d:ec:e4:61:ac:0a:d3:ee:d8:36:
                    98:90:0e:69:61:ec:6f:00:fc:79:f5:c2:94:51:cb:
                    b0:da:b4:5f:b7:cf:2d:11:15:29:b8:9b:c5:7f:6d:
                    5e:dd:4e:da:4b:8f:dc:88:c3:31:59:8b:22:4c:92:
                    76:bd:c0:96:c1:a8:cf:2f:50:3a:c2:38:a6:b4:c5:
                    68:95:e8:3e:7f:2b:3f:69:ca:3d:29:44:be:36:a0:
                    07:ce:5e:3d:22:fe:ca:2e:f8:88:d4:86:5b:10:d4:
                    53:72:82:dd:2d:a3:f8:00:e5:40:67:a2:04:a7:d6:
                    93:eb:9f:0a:0c:f6:0d:26:13:a1:ed:b1:fa:2e:42:
                    80:8c:02:a6:2b:7a:8a:e6:3e:fa:73:59:e4:7a:60:
                    08:f6:44:8c:f9:7c:27:7b:90:cc:ab:70:0a:a0:5f:
                    a9:40:1b:72:a6:8d:d2:69:74:14:64:6e:81:89:69:
                    05:33:2a:56:06:a8:3b:f1:5a:d3:e9:4a:db:4e:d0:
                    df:6c:4d:c8:e7:33:77:fe:f4:70:45:9b:fb:de:db:
                    de:74:99:61:ef:2f:1d:d7:94:45:0d:05:5e:e8:96:
                    50:e7:99:f6:11:b4:5f:f7:7a:3b:07:27:da:3e:18:
                    8a:56:80:cc:81:5b:f2:85:d5:e6:d6:eb:31:4a:6f:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:CA:4C:BC:DF:F7:AD:FB:FE:D0:95:96:CE:F7:EE:9F:67:9C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:20:0a:76:e5:56:3d:b1:5d:47:d8:df:29:44:7c:1f:e4:99:
         d6:cb:22:3a:80:fd:cc:3c:22:d2:d2:ee:05:fa:66:38:60:a7:
         4a:53:e4:1c:a1:01:65:e3:08:81:1e:cb:15:c5:12:99:16:6a:
         76:8d:6b:f1:95:74:43:55:5e:48:c8:61:f0:ed:c3:32:94:f0:
         a1:4e:e0:45:a0:9a:25:24:e4:5b:dd:41:5b:b6:7b:fd:81:04:
         49:22:d1:c4:ab:2a:00:24:48:97:a1:69:a4:ae:0b:12:d1:35:
         d4:52:57:a9:e1:40:f6:d3:71:2e:48:8e:79:f3:ea:f5:43:e4:
         20:4f:7b:3f:a3:7f:3e:03:85:ae:1d:a7:03:c9:74:92:91:66:
         3d:86:82:54:d5:10:29:ef:1e:42:d9:a6:03:ac:8d:ab:4b:87:
         be:5c:dd:17:3c:5f:b6:b0:2d:71:43:e3:79:4f:11:41:6e:51:
         de:d6:ca:8d:f1:df:f3:c8:21:37:00:24:83:8a:dd:4b:7d:f1:
         fd:1d:a8:f0:67:15:37:67:d3:51:29:ac:c3:77:74:71:79:9b:
         3f:11:8b:b7:c8:82:c4:c0:12:8f:cb:f7:ba:fa:6a:b6:6f:b9:
         4a:35:df:98:cd:b1:a5:84:c0:9f:42:e3:10:8a:b1:6f:f6:a8:
         a6:52:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:13:21 2024 by rpki-client on console-fra.rpki-client.org