Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
File:                     442c63df-c0a3-3159-955b-66d48fc740bf.roa (raw, json)
Hash identifier:          tN2i8PYI3Wz7/k0QsqOPZcYj8GzxEhYEBDROq+ZAEPU=
Subject key identifier:   11:91:3B:5D:17:E3:88:4E:FE:F6:C0:DD:A6:CF:0D:A7:41:FE:9B:D6
Certificate issuer:       /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
Certificate serial:       010D0C9F432858457082FE75D0ED7072A2F7D980
Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     16509
IP address blocks:        192.58.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fe:75:d0:ed:70:72:a2:f7:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=2ba28348-9868-4fba-a038-b04f089ea1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:01:93:7e:e9:1d:e2:97:70:02:01:0e:ba:
                    8c:f6:67:f2:7d:10:69:67:ef:95:7a:b7:79:df:76:
                    45:a3:27:65:04:2b:05:24:2b:9d:0c:ec:bd:12:4c:
                    3e:13:df:90:38:8a:ff:90:e5:3a:77:4a:3a:b9:d1:
                    0f:a9:d3:93:96:41:06:e8:7d:56:85:ca:3d:b3:8e:
                    37:4c:5c:70:6e:a3:3a:5a:77:dc:56:b4:09:b3:b6:
                    14:1e:01:19:61:f8:5a:f3:ea:b2:be:f0:ef:74:78:
                    ec:30:42:fe:a3:b2:67:4b:cb:4f:75:44:00:b9:fa:
                    39:36:b6:6a:df:cc:55:3d:9f:11:a9:8c:2a:08:5d:
                    30:d8:d5:3f:fa:ed:09:02:2e:61:30:25:a7:e1:de:
                    c3:44:63:7b:45:df:6d:91:da:8e:dc:56:88:e0:5f:
                    c9:0c:f9:44:a4:37:3a:16:47:24:e7:c8:e1:a1:b8:
                    d9:5d:4e:cc:cb:93:cb:9b:64:09:6f:42:f6:a8:28:
                    2f:23:bd:62:71:a1:0c:d3:ca:c5:12:a9:3e:6e:e0:
                    e1:35:f4:ba:26:ca:97:74:12:1e:b8:70:de:4b:23:
                    c9:f5:5c:73:da:cf:13:9e:e9:50:15:43:52:9e:27:
                    46:b9:c5:2c:5d:d4:63:df:8e:0a:38:d2:b6:9d:84:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:3B:5D:17:E3:88:4E:FE:F6:C0:DD:A6:CF:0D:A7:41:FE:9B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:33:1c:66:3f:0f:ce:50:c1:73:0b:40:bd:33:c5:9c:68:
         66:b9:e0:8b:66:f8:cc:af:96:26:58:cb:bb:51:09:8c:f0:1b:
         b7:f2:6c:0a:e5:71:2e:1d:9d:69:d4:ed:67:1f:4b:f0:e4:74:
         79:c8:aa:a2:c7:ee:e9:70:c8:6f:58:a2:0f:7e:de:6a:5f:fc:
         24:0e:41:d2:37:d3:fd:99:01:73:f0:e7:b1:f1:e5:dc:ff:9d:
         aa:f6:11:71:2c:0a:ef:06:1c:53:3e:07:f8:9a:4f:11:6e:5d:
         b0:5e:f9:6a:9c:88:37:ec:be:94:ca:0c:eb:80:2d:6d:d6:9e:
         18:20:b1:32:ec:58:33:dd:b1:a8:ee:a3:24:4b:cd:36:fd:a6:
         2e:10:19:07:1e:05:f9:a4:e2:ad:7c:28:7f:70:1d:8c:bf:df:
         4a:cb:e6:6e:db:a6:5f:41:e5:e6:76:23:06:46:49:3c:7c:49:
         d3:68:65:3f:07:57:11:11:b4:51:cf:93:cc:3a:bd:74:f7:65:
         82:b5:e3:d8:72:7b:fb:7b:f4:be:89:49:d1:9c:6c:34:b5:04:
         cc:1a:b0:64:14:95:8a:43:20:50:45:46:6e:e6:cf:be:9d:ca:
         bb:6c:a4:75:18:94:68:7e:f7:6f:2f:bc:9a:73:52:a5:2c:70:
         82:fe:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:32 2024 by rpki-client on console-ams.rpki-client.org