Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3d88adc2-1748-3a86-8c81-770d77bb4a74.roa
File:                     3d88adc2-1748-3a86-8c81-770d77bb4a74.roa (raw, json)
Hash identifier:          pAkANAHjXOEJHGChoFS1ttAs/L37mypr8aahuLkCUPk=
Subject key identifier:   04:8F:F7:3A:1F:70:63:93:BF:4B:B3:8E:37:01:88:A7:F2:3A:5F:A6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858450C20262CD44975137BA47800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3d88adc2-1748-3a86-8c81-770d77bb4a74.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     7018
IP address blocks:        162.244.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:26:2c:d4:49:75:13:7b:a4:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=a800c894-0401-4baa-ac20-2effede3688e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:b1:54:82:d3:59:4e:49:72:fc:8e:4d:13:
                    c8:a5:82:65:49:04:48:f9:2d:2d:f7:16:0b:ac:8c:
                    0d:63:cb:25:09:49:96:cb:35:80:dd:81:6d:ba:b5:
                    f9:d6:a2:6b:41:c1:d6:fe:35:95:7a:f5:9f:cc:e3:
                    85:74:f8:83:a1:60:bd:13:b4:b9:80:e5:41:ba:93:
                    d3:c6:99:46:8f:81:0b:db:3e:2b:9e:b0:48:2e:61:
                    61:9c:59:40:11:a9:d0:05:60:dd:dc:0a:81:d0:f0:
                    0e:a9:4f:ff:05:e2:3d:d8:0d:f0:cb:29:09:b3:7c:
                    81:70:9b:30:1d:3c:95:ee:a6:50:dd:cc:36:9f:a5:
                    0b:2a:0d:4d:26:e4:20:a3:2c:92:f4:6c:2e:c0:15:
                    dd:92:ad:3d:64:fd:55:be:a4:52:79:17:fe:d0:14:
                    ff:d8:da:fb:e0:39:9e:83:75:b1:32:c5:e9:5d:34:
                    fe:0c:56:47:79:2e:75:08:30:59:7f:60:e7:61:57:
                    db:32:e4:04:ae:75:b2:58:26:37:e8:e4:0e:2f:63:
                    b0:99:89:23:d2:f4:7a:0a:08:c1:50:f3:ed:a3:96:
                    fd:7c:4a:d4:81:ea:58:15:cb:bd:75:ad:a1:c2:15:
                    21:1e:39:10:13:f9:13:5c:67:d6:81:33:7b:af:b4:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:F7:3A:1F:70:63:93:BF:4B:B3:8E:37:01:88:A7:F2:3A:5F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3d88adc2-1748-3a86-8c81-770d77bb4a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:04:b4:5f:d2:54:6e:3f:4a:15:87:5d:37:7b:52:12:65:
         c9:b8:57:3c:ed:8f:d1:f9:20:cf:e6:07:ad:19:1e:5d:02:e5:
         b6:8f:04:c1:5a:f7:2a:96:f9:55:57:25:77:f9:df:74:24:9e:
         eb:02:73:14:32:bf:a8:83:98:92:d5:8c:88:23:92:89:3e:78:
         c4:1c:ec:00:d1:67:06:96:08:a6:03:1e:89:3a:c5:43:1d:83:
         6e:a4:ba:72:de:17:f2:d4:10:3a:e3:df:0b:7c:02:45:cc:a8:
         75:78:06:1a:ac:61:dc:61:3d:07:64:70:58:c3:15:ee:84:0c:
         35:33:fb:69:80:40:5c:a7:3a:e1:67:d3:7b:87:74:42:e3:f8:
         b3:2e:c7:27:54:38:5e:aa:03:c7:96:20:a7:a9:a1:f5:65:b7:
         ba:56:fc:87:b9:72:a7:fb:c6:ef:8b:30:fe:3f:7e:5a:62:dc:
         f6:d0:d0:d8:db:9a:5f:aa:73:f5:d8:16:16:56:2c:24:54:73:
         0c:b2:f4:ca:43:fd:e9:b7:fe:6b:b8:f5:3f:cb:57:ac:5c:98:
         f9:bc:36:02:28:83:5d:9d:ea:25:e5:fc:62:12:c0:a0:50:e5:
         9b:53:09:ab:d7:b3:d4:5f:68:8e:ae:63:6c:5c:6d:3e:13:3a:
         56:35:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:35:01 2024 by rpki-client on console-fra.rpki-client.org