Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa
File:                     28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa (raw, json)
Hash identifier:          ikLf+L96JJyn44MTEFIuEXspVvtGzeONF+6nUgNeivQ=
Subject key identifier:   C3:FE:4E:16:7D:87:25:A7:91:3E:A9:3E:C1:CF:80:B4:3E:A2:96:96
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285847EE8A2B410927113D18792B60
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        157.248.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2b:41:09:27:11:3d:18:79:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=1955b7c2-6e20-47e9-915f-c7bdc0b74bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:eb:b3:25:68:92:df:e8:c1:6e:c0:62:84:
                    66:65:d9:a8:7b:59:87:42:25:2b:9d:04:db:b7:ac:
                    d6:33:fd:02:a9:eb:ab:ca:b3:29:37:2f:fd:ba:4a:
                    cf:fb:53:f5:1d:e7:f5:63:90:b9:35:ed:f1:f5:97:
                    23:f6:42:d7:aa:f1:10:12:ab:6b:12:58:0d:22:90:
                    aa:74:38:00:fe:61:73:1a:d6:91:ce:cd:d0:ad:03:
                    fc:f9:9f:9d:6d:b0:af:60:6e:c9:15:65:6c:cc:20:
                    bb:27:5d:e2:fe:f5:dd:32:31:ec:2b:a3:73:a1:cb:
                    c0:56:e9:18:07:d1:41:e0:d9:42:a0:65:03:d0:bb:
                    ca:70:29:b9:10:79:34:cf:c3:c3:26:21:0a:f8:d9:
                    b0:35:5a:00:09:23:34:4d:11:2d:59:9a:ed:28:a5:
                    48:ff:04:fe:33:42:21:4f:9a:27:2e:db:1d:c5:97:
                    c1:a7:6e:14:0a:4e:e1:3f:25:14:0c:ad:31:88:89:
                    06:51:44:66:9f:c8:a8:f5:7f:52:1d:e9:0f:e2:f3:
                    51:94:b2:e0:d4:d4:26:88:93:29:03:57:90:72:c5:
                    d8:f2:30:d4:76:59:87:40:75:6d:01:03:41:9e:ee:
                    19:0a:e2:41:84:05:45:54:ba:7e:29:16:ef:49:08:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FE:4E:16:7D:87:25:A7:91:3E:A9:3E:C1:CF:80:B4:3E:A2:96:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:1e:fb:7b:bf:e9:48:4c:59:fc:37:7f:40:a1:ff:46:f0:
         44:9e:12:72:94:5a:de:cb:cb:6a:e5:aa:ef:e4:fe:0f:66:67:
         48:ee:d7:a3:8f:7d:be:47:a3:c7:65:b9:c9:f5:e3:05:91:79:
         15:23:cc:3e:3c:2d:61:37:14:7f:bf:43:e2:25:41:97:f2:e0:
         b3:e1:89:51:f9:0d:2f:9c:5b:30:fa:2b:5e:6c:e8:0f:ed:bf:
         6a:3e:36:80:41:9f:ff:f2:62:d5:e1:af:ba:17:56:23:e5:2a:
         07:c0:fb:72:f0:81:1f:65:62:02:a4:a7:ca:bf:ad:5f:0a:f2:
         03:a4:a5:7a:5f:cb:be:5e:6f:7a:9a:af:73:58:23:2f:b3:87:
         96:1d:95:f4:ee:9f:5a:a1:a6:52:2c:6d:bd:64:28:ee:00:c0:
         4f:7c:f8:a5:e3:f8:35:c3:d8:cc:c2:1e:e1:48:6a:ed:df:8a:
         55:a7:b0:02:4b:60:76:66:93:b0:f9:11:5a:65:fc:6c:aa:33:
         a2:6a:c0:2c:60:1c:ff:b9:1b:f0:c9:de:08:19:c3:e8:49:e1:
         f0:06:5e:ec:89:04:c3:14:56:b4:ac:b1:22:bc:7f:5e:f6:ab:
         61:c7:f9:cd:e1:c2:9a:9b:04:d6:d1:8a:07:da:f2:13:86:e3:
         d0:33:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:12 2024 by rpki-client on console-ams.rpki-client.org