Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d5b9678-560d-35f8-b636-f8eeae11bbaa.roa
File:                     5d5b9678-560d-35f8-b636-f8eeae11bbaa.roa (raw, json)
Hash identifier:          AgGc/wx8pSJSQxmpCi+S2+N4zC4EF7xl0MdZgZ+T5yo=
Subject key identifier:   9A:8D:22:A2:92:6C:3C:78:99:6F:F2:E4:B7:68:CF:E5:36:0F:8A:58
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285844F9FABBA099DEAC8BDA35E280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d5b9678-560d-35f8-b636-f8eeae11bbaa.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     1239
IP address blocks:        162.244.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:bb:a0:99:de:ac:8b:da:35:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=dc20ba35-248d-4dfc-8583-fd549b4a3952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:3a:24:bf:5a:30:be:db:9c:62:01:7b:ca:
                    9f:7b:31:86:e6:ee:55:54:02:9f:70:9e:15:2a:41:
                    a5:e7:76:28:9e:4b:e4:2c:76:af:bf:02:73:12:d0:
                    7b:18:a3:08:df:a5:c8:6e:f5:4b:1d:c5:a6:a0:01:
                    8e:c4:a8:a7:ca:8f:25:f8:f0:3b:9c:06:7e:da:87:
                    b3:c8:98:dc:0f:84:eb:53:42:e6:d6:8f:9b:6f:91:
                    48:d7:90:5e:ec:39:12:80:f1:11:46:63:e3:56:01:
                    d5:ad:8b:f7:72:20:d0:b0:b9:1d:33:df:bb:6a:c1:
                    af:d0:b5:e3:4d:ce:e5:47:e8:66:a8:bd:e3:0a:9a:
                    af:88:2a:63:8d:3c:68:4f:b7:0b:43:3e:60:0d:b1:
                    48:e6:cf:ad:0d:06:47:4e:c3:b6:09:14:0e:82:6d:
                    b0:43:83:84:31:6b:90:b0:20:20:b9:7f:55:15:3a:
                    31:86:60:07:3d:c7:e7:bd:b6:67:94:71:d3:01:40:
                    70:ef:77:49:e6:8c:50:44:52:4e:1e:9b:96:eb:33:
                    39:fa:d8:04:5e:e6:4c:2a:0f:af:35:dd:8b:4f:bb:
                    fa:53:8b:01:76:eb:60:97:56:e7:5c:01:aa:c9:b6:
                    c9:11:03:f7:90:25:ed:23:d9:f6:49:e8:19:fa:87:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:22:A2:92:6C:3C:78:99:6F:F2:E4:B7:68:CF:E5:36:0F:8A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d5b9678-560d-35f8-b636-f8eeae11bbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:39:72:af:88:f4:5a:0f:43:e3:75:e5:b1:cb:51:40:fa:89:
         df:8f:97:17:9a:6f:cc:81:a9:13:ab:41:88:6d:c9:51:27:36:
         4b:7e:fb:52:b0:5f:a4:bf:9b:91:2d:1f:f1:fc:c3:2d:8a:14:
         6c:93:c0:72:78:40:9e:4a:f6:bd:a2:a9:ff:4b:af:76:35:c0:
         a9:fb:3d:c4:e1:97:a9:0b:53:63:ba:c1:4d:80:ea:7f:d9:75:
         b7:6c:15:00:13:5d:24:78:9e:92:83:5d:e6:16:96:b5:0a:52:
         05:b8:77:8c:c9:02:98:20:f8:56:66:10:49:d4:92:b0:86:48:
         31:72:bd:a9:64:31:63:8f:e5:c6:b0:db:36:4c:28:56:0e:a8:
         38:48:06:b3:75:5d:77:f2:62:ce:4f:8e:07:c9:6c:67:d4:0d:
         fb:17:75:dd:91:99:1e:66:2e:b9:6c:fc:2a:42:3b:76:6d:0c:
         cc:55:5e:ae:0b:6d:5a:ce:7a:ca:07:1d:ec:1c:58:0f:7d:e9:
         d7:a4:5a:f0:eb:57:33:d7:ff:c2:92:8a:db:28:22:50:f3:41:
         f7:95:de:99:b1:78:7b:94:ef:7a:29:ee:b2:fb:18:16:6a:29:
         b2:bb:90:ee:a6:fe:bf:db:cb:a5:8a:c3:b9:08:f3:8f:7c:90:
         77:60:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:09:49 2024 by rpki-client on console-ams.rpki-client.org