Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1a8f2c83-2e27-3617-bdf4-b5e454bea066.roa
File:                     1a8f2c83-2e27-3617-bdf4-b5e454bea066.roa (raw, json)
Hash identifier:          Op67XGqoPMioVTRVqIN8HtodSJ3eBAkR+QE8YrRvvbM=
Subject key identifier:   A6:AC:4B:8B:59:57:5F:1D:C4:82:C9:09:9B:02:A8:E3:51:0D:F6:52
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584574B31419121740220191AE00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1a8f2c83-2e27-3617-bdf4-b5e454bea066.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     13213
IP address blocks:        216.119.144.0/24 maxlen: 24
                          216.119.155.0/24 maxlen: 24
                          216.119.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:14:19:12:17:40:22:01:91:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=ae9ee2ad-9786-4a67-ae01-9f17596f2ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:1e:64:b6:c9:6b:2d:8c:1c:32:79:d5:31:
                    9d:48:41:85:d6:50:6e:70:26:6b:62:cc:0a:7a:70:
                    b2:34:b5:d2:bf:85:04:ce:58:7d:87:fd:b2:01:05:
                    7a:7f:b0:f9:cf:47:67:3e:47:f1:d6:78:fc:6f:38:
                    de:30:20:80:ee:6c:fb:dc:81:8a:52:27:f7:28:1f:
                    f9:6d:90:05:ec:2a:a9:2b:6c:e8:89:f0:58:96:25:
                    d8:b7:cf:2e:04:71:27:de:fc:f1:73:10:07:83:d9:
                    dc:b1:4a:ea:c1:da:3d:6c:46:f3:97:06:d6:e2:b9:
                    e2:1f:2a:cc:1d:10:e6:8c:ba:69:10:38:91:67:73:
                    ce:9b:a1:fb:28:0e:fe:b3:6e:99:ad:60:28:90:65:
                    03:33:b1:d2:37:40:44:77:83:ab:41:e3:57:41:b4:
                    2f:88:a9:56:4b:88:74:b2:63:a4:70:ce:c3:d1:6a:
                    7d:f1:e3:8d:0b:69:a7:6c:da:5c:bf:59:8e:fd:68:
                    64:fb:f1:c5:13:2e:fa:7e:1a:f4:b3:a8:7c:43:a6:
                    fc:d4:9d:1b:3a:dc:78:b8:6a:58:0e:31:0f:40:7f:
                    11:5e:8c:91:e3:23:ef:ef:34:19:52:fd:6c:40:03:
                    0e:a1:76:bd:89:f9:32:d4:f0:71:75:de:74:ce:3d:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AC:4B:8B:59:57:5F:1D:C4:82:C9:09:9B:02:A8:E3:51:0D:F6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1a8f2c83-2e27-3617-bdf4-b5e454bea066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.144.0/24
                  216.119.153.0/24
                  216.119.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:9d:b2:f7:b4:a3:ff:38:2f:a6:06:21:2f:c7:12:67:fa:
         80:88:05:e0:b1:13:bf:86:ed:d2:ee:ca:b1:df:2b:e1:a5:d4:
         80:f0:a2:6d:e2:a7:ec:9a:6c:91:75:c7:98:fd:58:5f:26:0f:
         f3:55:1b:b7:49:0a:6b:86:03:6e:6e:46:ab:24:69:f7:1c:0e:
         9d:c9:70:c7:25:53:9f:03:b1:35:0e:10:ff:d6:85:e1:b3:45:
         32:4b:03:5c:fd:ba:37:f0:66:27:54:5b:99:a3:f2:0e:79:9a:
         29:27:7d:cf:6b:5c:d5:07:ab:a2:58:51:17:0c:27:83:56:72:
         63:22:8c:95:8e:3e:7b:2b:39:83:68:ab:74:d6:5c:18:64:31:
         5f:a2:13:ba:be:7e:e7:fb:78:d9:65:9f:93:02:57:e5:27:70:
         8b:6d:74:2c:26:ad:b8:f7:5a:e1:24:08:36:71:aa:d6:c8:d0:
         59:70:10:50:82:e2:4b:97:9a:3c:5b:e1:79:d3:5d:d1:b4:76:
         2a:ac:d4:15:f9:6f:6e:89:94:19:10:28:e2:29:c6:13:45:a9:
         c9:ed:59:47:ef:2b:85:63:44:cc:52:ca:5e:78:23:2d:07:2d:
         f2:5f:b9:66:c1:98:1c:2c:1b:98:c1:3c:2a:b3:7e:0a:53:c7:
         39:82:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:23 2024 by rpki-client on console-fra.rpki-client.org