Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
File:                     8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa (raw, json)
Hash identifier:          VFSTc4sJmK5TQ+p2yz8DyZSTfy6QKsJqb9+lFh2WJek=
Subject key identifier:   C0:5B:5E:0B:71:26:C5:05:C0:80:10:D4:20:8B:87:B4:D0:AB:F2:A6
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F43285845708304D1BED129547C120480
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     16509
IP address blocks:        134.195.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:04:d1:be:d1:29:54:7c:12:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=cfa10079-1f09-4969-9153-5e1458af7cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:96:4a:6a:49:99:9b:45:6c:a6:bf:a6:51:
                    b3:9e:e8:a7:e6:56:c1:dd:14:69:60:3e:de:de:45:
                    84:0b:80:e2:7b:64:31:37:40:a0:c3:6b:56:bf:c8:
                    d9:ff:e2:32:52:cb:0a:6a:81:c0:95:1b:49:43:d4:
                    43:6b:aa:88:c0:51:b7:90:10:b6:f9:04:48:6b:13:
                    ce:09:c9:4c:78:d2:1b:f1:f5:60:dd:1e:78:96:da:
                    d5:dd:36:9e:31:b8:bf:d7:21:16:56:ae:89:ea:8d:
                    32:18:5a:ed:0b:a5:31:a6:16:ab:c7:7e:57:e4:94:
                    6a:28:69:75:8a:f8:46:51:67:ed:49:46:73:91:cd:
                    12:e5:de:27:ec:43:4f:c6:7d:96:f5:9c:bd:19:97:
                    6e:16:08:b3:11:56:dc:df:db:7b:a8:14:91:88:ff:
                    63:cf:fd:26:4f:40:36:d0:95:b0:f9:2c:ae:f9:c3:
                    13:ab:f4:16:f5:eb:1a:63:d4:f1:ce:dd:81:7f:2b:
                    6a:e0:60:8f:d1:fb:e4:e8:d6:cb:98:65:24:7f:8e:
                    d7:0f:37:2d:2a:23:14:d6:b0:87:fc:4f:79:77:44:
                    49:f3:2b:e2:d9:2f:fe:eb:a5:a7:0e:99:9a:1b:12:
                    71:6c:cb:86:98:74:64:e8:9e:c6:84:6c:68:35:63:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5B:5E:0B:71:26:C5:05:C0:80:10:D4:20:8B:87:B4:D0:AB:F2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:1c:11:f2:3b:3a:c6:ff:61:93:df:30:2f:ab:95:68:d6:
         72:80:fe:b2:61:53:35:c4:b0:20:48:28:0f:d3:66:fe:0c:4e:
         03:be:c4:30:ae:20:5c:76:46:8f:6f:bd:24:80:78:d6:12:76:
         d8:a6:14:f1:2e:c7:84:8e:1a:23:60:a2:85:14:44:58:45:f7:
         08:70:b6:28:f4:78:50:1b:9e:87:09:17:fb:e5:27:25:e1:e6:
         84:cd:d7:5f:9f:c9:6d:c7:9f:7a:c2:7e:f1:ad:3c:e6:04:8a:
         c9:5a:e1:c9:ad:cb:d2:b8:50:0f:e0:1e:b0:9d:b6:37:9b:6d:
         20:8b:f1:df:5f:a9:c2:2b:14:52:b7:96:7d:4d:b9:05:5e:91:
         e6:af:36:f8:14:70:fa:7f:e7:05:b7:ee:85:27:e9:8a:0b:8f:
         2b:9f:6f:2d:f0:88:ce:90:ad:af:51:bb:f8:c3:fa:e5:74:9c:
         61:7e:fd:86:14:76:c1:ee:45:53:71:9d:7f:0d:a2:30:8c:d4:
         6a:ee:e9:63:75:50:40:0d:a5:e0:9d:98:de:bd:46:c1:99:4c:
         d1:17:20:fe:a8:c8:bc:58:43:8e:e2:51:80:29:28:19:b9:81:
         a0:5c:12:d3:31:cb:83:e8:17:2f:cb:e0:b7:8f:21:11:6d:42:
         14:01:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:29 2024 by rpki-client on console-ams.rpki-client.org