Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/273b355c-8b63-357e-af7b-5d147f62a5e2.roa
File:                     273b355c-8b63-357e-af7b-5d147f62a5e2.roa (raw, json)
Hash identifier:          4Ju65kcpNp3BcA32L6cZ/IzS8te0YdYyGY1Q5sj2Q08=
Subject key identifier:   9D:F8:70:F8:DA:29:34:7C:51:7F:05:89:4E:EA:48:AC:30:D0:11:9B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490DE82107C1826DE94CB740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/273b355c-8b63-357e-af7b-5d147f62a5e2.roa
Signing time:             Thu 21 Mar 2024 21:48:06 +0000
ROA not before:           Thu 21 Mar 2024 21:48:06 +0000
ROA not after:            Wed 19 Jun 2024 21:48:06 +0000
asID:                     36492
IP address blocks:        64.9.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0d:e8:21:07:c1:82:6d:e9:4c:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:48:06 2024 GMT
            Not After : Jun 19 21:48:06 2024 GMT
        Subject: CN=9e2cd009-30b8-48fc-a955-e41554c16f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:c0:c4:7f:0c:c8:93:26:ee:e3:4e:38:48:
                    de:58:56:dc:6f:d4:35:b5:fa:f7:c8:30:55:fa:a3:
                    29:d8:ff:03:06:8c:ee:a9:64:85:7a:76:34:65:0e:
                    3e:05:1c:6e:17:98:c1:d8:39:48:9c:f5:ed:9c:6e:
                    77:f4:d5:6a:cf:8e:3f:8c:76:b9:23:b6:79:0b:33:
                    3a:da:6e:3b:17:23:f6:fe:2b:92:71:4d:03:a8:4e:
                    15:d6:64:1a:71:e1:d2:1f:a2:8c:e4:df:ab:a3:f2:
                    b5:e5:06:8a:83:dc:4f:0d:d9:03:36:ac:96:ca:6b:
                    6f:4e:c5:26:9b:98:b3:57:2d:e0:41:a5:06:6a:43:
                    42:e1:3a:52:5f:92:5e:ae:91:fe:b0:df:e1:a4:42:
                    76:ec:8b:b2:fd:48:ab:59:e2:db:2f:2b:fe:5c:07:
                    fe:9f:af:02:9c:c9:62:06:41:e0:0c:74:c9:c3:b2:
                    f0:6d:69:ec:d7:97:3e:de:26:71:d2:31:e2:e1:fc:
                    dd:c2:3d:bb:4d:83:c2:8d:0d:58:7b:a8:1f:74:56:
                    d4:d7:90:21:58:4e:c6:d8:52:da:62:3c:7b:5c:52:
                    d2:96:b8:0e:3a:0b:36:b6:10:78:4f:bf:bf:ee:5f:
                    c8:5b:8b:e9:8f:7f:d1:8c:3b:e0:2a:46:f0:53:0e:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F8:70:F8:DA:29:34:7C:51:7F:05:89:4E:EA:48:AC:30:D0:11:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/273b355c-8b63-357e-af7b-5d147f62a5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:72:bc:81:71:73:97:8f:19:47:88:09:c1:59:6b:89:a6:f1:
         6f:d7:90:80:00:30:b0:9c:97:ea:2f:89:3c:99:f0:0f:8d:03:
         f8:9d:24:ef:fc:bb:ce:48:19:50:e6:3c:43:dc:81:a0:ce:0e:
         66:0f:1e:06:ab:67:e6:ff:52:a8:1a:e9:d6:ec:3d:6a:91:30:
         46:6a:d0:3a:b0:32:11:e4:68:e4:d4:76:38:b6:fa:0d:5f:ba:
         8a:97:9c:71:04:df:c1:07:91:e8:d6:dd:50:08:91:56:79:ee:
         37:60:6e:61:1e:f0:10:ea:ad:3d:0b:23:9c:23:65:fd:36:c6:
         1e:02:cd:ca:8a:cf:03:d8:5c:9d:be:b4:81:54:61:18:0f:53:
         f8:56:42:d5:ad:f5:03:49:28:87:6b:02:9c:87:09:25:53:65:
         44:24:c9:48:ef:93:78:f3:d9:d5:2e:af:50:a0:d1:83:44:7f:
         56:28:90:06:28:73:25:51:be:65:ee:7c:b5:e0:f0:98:ed:02:
         0f:35:22:d1:d8:e1:ea:8e:92:80:d6:65:5c:6c:eb:ae:ec:c6:
         22:76:2e:29:14:bd:3e:0b:53:85:35:58:f5:6a:e7:e6:18:2d:
         a3:20:45:25:fd:fc:f1:1f:ca:e9:75:71:52:d1:28:ae:4d:c5:
         7e:2a:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org