Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa
File:                     b0af857f-33c3-32a0-9e32-f2b6e0088900.roa (raw, json)
Hash identifier:          wzorIGPHgYJ4V68k37CM44gQm/JcqOrTWLLQo6GmipI=
Subject key identifier:   42:8B:17:B6:BA:0D:69:90:77:34:A9:9D:CB:EE:C5:04:19:8F:DF:0D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845453D6D5F6D2131A5CAC148C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     19437
IP address blocks:        216.24.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6d:5f:6d:21:31:a5:ca:c1:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f8cb0c0b-b152-4c6b-9b4d-ffefcd154726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:9c:16:29:8d:7b:a6:fe:93:be:04:36:2b:
                    12:be:05:64:7d:c6:68:f6:ad:66:fa:8a:fb:ba:a2:
                    10:bc:d6:f5:47:4d:34:23:74:65:e5:de:b4:59:7b:
                    b0:96:04:18:be:ec:d7:45:f6:f0:de:68:13:bb:56:
                    89:de:1d:ca:55:fa:19:5c:f3:ca:28:a0:8e:e8:56:
                    b0:ef:48:85:69:e0:91:47:ff:a1:03:31:3b:9f:c8:
                    7e:d0:92:29:be:19:a7:9d:63:d9:4b:ca:3c:f8:96:
                    82:61:cd:f1:b7:26:6d:1a:ba:0b:5c:60:3e:46:8e:
                    2a:eb:92:41:24:ef:46:2b:f2:de:f1:ea:55:79:ef:
                    ea:fc:c0:50:3d:86:60:ef:60:b0:e6:05:19:66:64:
                    98:de:e5:b9:f6:a2:24:c6:50:b2:64:14:1b:87:46:
                    59:5b:e2:e1:16:0a:94:50:17:91:52:23:7a:81:35:
                    85:8e:40:dd:59:53:75:ca:fe:53:ef:fc:6d:5b:97:
                    7b:85:00:b8:84:72:84:75:31:10:95:52:e1:15:94:
                    2f:76:be:09:ad:04:09:b0:f5:15:7a:48:37:ca:90:
                    01:6c:87:ae:62:61:01:d0:cf:1b:48:fb:fb:be:c8:
                    34:72:5a:af:71:88:84:d5:e2:d5:64:91:15:ce:68:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:17:B6:BA:0D:69:90:77:34:A9:9D:CB:EE:C5:04:19:8F:DF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:90:2b:00:89:c9:f3:0c:36:16:f9:fb:ff:da:87:9e:85:
         48:37:4c:8b:dc:90:14:c0:ac:70:55:fb:a4:1c:e1:e7:39:90:
         f3:26:f2:8c:ca:09:ba:b7:cf:23:7e:ad:3a:11:29:d4:39:2d:
         7e:c5:19:ab:61:af:62:fe:f0:52:4f:11:f4:e2:40:38:82:46:
         79:a7:f2:1c:6b:be:bc:39:b1:09:ca:85:68:a3:bd:37:4d:50:
         5e:1e:d4:f2:f4:ff:0d:18:b5:d3:cb:22:e9:3e:3d:4a:8d:2f:
         82:38:df:be:a3:53:50:f2:c9:67:83:b4:62:ab:bc:21:26:e1:
         2d:ef:8d:da:04:b2:b9:08:3d:b1:d6:d3:ae:42:8b:a1:3c:1f:
         ab:5a:11:e9:20:51:53:aa:b5:d5:77:72:cb:1e:b9:10:e5:8a:
         94:a0:77:07:20:26:81:b8:77:a0:fb:9e:4c:d9:ad:40:3e:08:
         2a:b4:76:f8:c4:62:d9:07:0c:d4:35:c0:1b:4b:f9:a5:c5:7a:
         ad:8e:c6:fb:5f:e4:22:04:c9:7f:47:4b:d9:4e:16:97:ed:07:
         2b:b7:6b:8f:67:59:24:7d:43:b0:99:d1:8b:df:d6:a9:37:17:
         1b:41:fd:79:f7:16:44:49:b3:21:c6:5d:12:97:7f:94:e7:bb:
         00:22:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:50:40 2024 by rpki-client on console-ams.rpki-client.org