Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa
File:                     28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa (raw, json)
Hash identifier:          q08NeAyo1+ZTR2x4ah6P3zldODblUauvMLk41WPzppo=
Subject key identifier:   96:28:E1:F7:AC:8A:BC:2A:D9:6A:AA:5D:68:FA:03:F0:38:AF:E2:DA
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F432858454F02BEA7B33DEB002F70A200
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        157.248.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:be:a7:b3:3d:eb:00:2f:70:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=c3933f3c-876e-4ea4-9680-8fb0a83fc55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:cf:fb:38:8c:80:1e:a2:f7:63:c7:14:cf:
                    d7:57:ae:81:72:d7:fb:0d:5b:79:8c:3a:4b:e9:96:
                    71:54:2c:19:5b:43:af:d4:4e:45:2a:c5:e1:d9:71:
                    e6:66:2d:7c:71:16:ae:88:1f:46:a8:53:f6:f3:4f:
                    8e:27:fd:88:03:50:d5:64:6f:81:4a:4e:e7:08:c8:
                    8c:6c:6a:88:ed:34:15:08:b3:28:88:b3:3c:ad:97:
                    17:65:70:09:bf:49:0f:c8:55:12:ff:ed:e5:0a:e4:
                    14:a2:f9:ca:b0:a5:a3:1c:c1:3d:10:31:f4:95:2e:
                    1c:38:86:70:5c:93:2d:81:36:52:d8:5f:cb:cc:94:
                    46:bb:86:fe:03:4d:92:dd:25:8f:c9:15:38:83:d9:
                    ee:9e:4e:fa:43:dd:3b:99:b9:9d:6f:e5:e6:96:f4:
                    6c:dd:92:59:65:9d:1a:60:11:90:ba:71:56:ad:ae:
                    5f:93:22:3c:71:89:0f:1c:bd:44:a0:f1:ef:87:62:
                    c2:75:bc:d7:fc:e7:53:7c:f9:38:9a:92:6a:32:d9:
                    39:c5:fe:b5:86:c6:9b:11:e5:ff:8b:84:af:d9:d5:
                    18:6b:6e:6f:c7:db:e9:36:ec:1d:9f:f6:bb:11:e8:
                    3c:23:d3:f6:d7:e0:e4:d3:52:19:ab:42:fc:5e:e6:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:E1:F7:AC:8A:BC:2A:D9:6A:AA:5D:68:FA:03:F0:38:AF:E2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/28b5c2bf-ac55-39f9-a6c6-dde621518c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:c5:f2:ea:23:01:8e:41:2a:ca:20:7f:8f:6a:ce:89:e4:
         9e:4d:e6:0c:72:35:44:0d:d4:20:0a:35:42:a6:82:f6:57:1e:
         07:90:68:41:75:ac:53:a0:b4:1f:fc:7a:5b:32:db:1f:6d:4d:
         5f:a8:02:06:93:31:19:dc:35:f0:b4:2f:4b:6e:48:40:19:a0:
         a8:f4:aa:ac:31:ef:16:11:17:22:bd:b9:ce:4a:b5:08:ba:82:
         07:77:0a:94:63:2a:67:e5:72:17:40:fc:87:d2:f0:37:42:af:
         b6:db:f9:4a:c9:ab:f6:40:7a:ae:3f:1a:d0:70:90:cc:ad:cd:
         7e:66:3e:1c:88:d0:ee:17:49:2f:ca:8b:26:c7:46:b0:05:1c:
         a4:28:3d:07:72:10:0a:db:bc:68:c3:71:85:45:92:31:3b:4e:
         0f:9d:c8:16:44:80:3a:4e:dc:d9:a2:fa:61:f2:e9:44:6b:7e:
         fb:48:ee:ee:e3:2e:73:91:49:a9:1d:ed:a8:4f:be:0f:00:3c:
         08:f8:7b:21:4c:3d:46:ef:43:be:e1:22:3c:1f:b5:ec:7e:68:
         56:97:97:e4:50:89:0d:ce:6e:11:af:2e:98:93:c7:de:07:57:
         63:38:92:2a:71:65:d6:19:e0:b3:f7:27:69:7f:46:46:e2:5e:
         06:bd:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:40 2024 by rpki-client on console-ams.rpki-client.org