Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aa269fb4-09e7-3ef6-bc14-cbafa5e63e4a.roa
File:                     aa269fb4-09e7-3ef6-bc14-cbafa5e63e4a.roa (raw, json)
Hash identifier:          yP5khw6FDO0287QFNr+ftj6SpSth3Jj1E0Md/OBrz/Y=
Subject key identifier:   14:0B:82:2E:DD:BC:C6:7C:4B:55:13:3D:32:B6:67:A2:C3:46:89:80
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285844F46553B77D0C6A8A71558400
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aa269fb4-09e7-3ef6-bc14-cbafa5e63e4a.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     7018
IP address blocks:        216.24.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:53:b7:7d:0c:6a:8a:71:55:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=706ddb91-6434-47ba-9b33-3b94c9795e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:8f:83:2f:3e:93:ba:56:13:a3:03:ff:72:
                    a8:c0:8f:6b:2f:f9:7d:87:13:21:2a:14:11:bb:e4:
                    98:b5:6d:f6:a6:3c:c9:1b:7e:1b:a1:0c:ac:7c:ac:
                    b0:9d:7e:97:d7:ec:57:b2:86:23:31:08:46:94:17:
                    58:3c:55:2a:58:df:eb:17:36:62:40:2c:73:ad:3d:
                    c8:29:4a:20:0a:ec:28:9c:9c:3d:1f:bc:e1:b7:08:
                    51:fc:24:de:ed:4f:a4:0e:e7:22:55:f2:23:a6:23:
                    53:4b:4d:38:32:36:43:14:bf:46:86:29:fd:4c:85:
                    91:a5:eb:59:08:30:d1:45:ee:e4:f1:48:43:93:e6:
                    94:51:32:f4:2a:8b:09:2f:f9:08:85:c0:42:db:bd:
                    21:b0:df:4b:a0:88:a0:a1:41:8d:dc:95:39:3b:6e:
                    c5:73:20:22:35:24:1a:7a:a1:79:4b:9e:f8:cd:3a:
                    9b:ca:69:d2:ea:e1:81:29:f1:e2:1c:be:7d:41:c3:
                    5c:63:a8:e6:5a:22:f5:b1:d7:77:5d:5d:32:c7:9a:
                    84:02:8b:a5:b1:80:e2:f2:97:4f:03:11:00:8b:be:
                    36:9b:a8:36:8c:9c:53:b1:e3:22:72:29:0d:e5:65:
                    dc:4a:13:54:38:df:66:63:8a:ca:e8:71:87:ab:d0:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:82:2E:DD:BC:C6:7C:4B:55:13:3D:32:B6:67:A2:C3:46:89:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aa269fb4-09e7-3ef6-bc14-cbafa5e63e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:40:34:dc:d2:d4:8a:f7:cd:4a:0f:f8:bb:18:cb:87:01:96:
         b7:a1:5b:d7:f1:51:7d:a0:34:25:1f:4f:91:72:07:ff:f5:8e:
         8c:07:43:36:19:16:97:51:04:8d:94:c6:c4:0f:77:77:1f:5b:
         30:66:d6:1a:94:89:5a:69:e8:e8:fe:1c:bc:09:67:65:ac:5c:
         dc:7a:7c:f9:1e:49:e8:ec:09:fc:a6:de:75:cd:26:cc:2e:68:
         05:0c:67:e1:a8:32:54:64:a4:b9:49:15:18:d4:4b:0f:ce:d8:
         e7:70:1e:4c:b4:18:23:81:16:08:74:8d:52:b4:37:a4:3a:20:
         65:35:78:9e:df:86:96:58:4a:aa:84:43:fc:19:eb:33:92:8b:
         2a:1c:6e:96:c4:2b:ac:e5:a8:90:71:da:3d:66:58:7f:15:f3:
         4e:8c:5c:df:f9:5e:4e:27:b3:3b:28:40:17:7c:f6:49:9f:5b:
         44:1c:e5:9c:13:79:fb:dc:e4:09:9d:c1:be:6f:14:d2:d6:83:
         57:7d:ca:23:17:a8:80:fe:51:ee:63:2d:aa:d1:4a:c4:45:2f:
         b5:0d:19:85:95:b5:26:8c:c6:29:bd:7f:9e:b9:b1:35:1b:41:
         4f:8e:f9:eb:bc:3f:2c:2a:d5:48:f9:35:2c:4c:b5:62:b2:b8:
         75:94:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:15 2024 by rpki-client on console-ams.rpki-client.org