Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
File:                     67701918-208f-334d-8a27-2895fe2771e3.roa (raw, json)
Hash identifier:          0f33cxtOFhbmemsK1jR40Ftb/Lk4W48NrBocgfUwMWA=
Subject key identifier:   03:DE:78:FA:C3:72:EE:BA:57:F1:13:50:2A:6C:AC:F3:8D:B1:B1:B6
Certificate issuer:       /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial:       010D0C9F4328584515E58C74067AC04196D2AEA0
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     212219
IP address blocks:        216.252.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:8c:74:06:7a:c0:41:96:d2:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=f9827dcd-1896-4c34-ba40-621a31748fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:15:22:56:70:9a:00:44:49:ad:ab:88:1e:
                    b0:db:c8:a3:16:ad:b5:dd:16:39:cb:f0:dc:1f:54:
                    20:72:4c:59:27:87:11:f7:5d:8f:26:07:9e:3f:eb:
                    2a:68:4a:06:d2:a6:65:96:54:63:eb:7d:9e:00:fa:
                    1d:d6:5a:06:b2:94:d1:83:ae:c3:c5:c5:2a:ec:67:
                    7d:f3:1f:e2:68:e1:89:fd:8b:29:44:52:08:d4:fe:
                    a1:35:ed:a3:4f:75:2c:7d:3e:62:10:92:ca:53:ac:
                    40:81:94:e6:22:3c:14:bb:78:8c:33:54:3b:96:c4:
                    a0:d1:da:b0:5e:d1:60:97:f2:e1:e0:c7:c3:bb:17:
                    1d:c2:ed:b1:10:8b:8e:dc:6e:dd:e6:45:5b:79:88:
                    01:4d:f7:56:2d:ce:f1:79:2f:e3:ec:bf:77:54:19:
                    f4:cd:88:4f:8b:5d:89:90:f0:bc:76:1d:f8:58:d8:
                    a0:b1:3f:75:22:60:28:fc:75:ed:29:7c:63:4a:9d:
                    65:65:01:5d:bc:f5:3a:80:e0:e4:7c:5d:a2:95:9c:
                    bd:1d:20:e3:78:a6:8a:7c:9a:e3:33:5b:cf:e2:73:
                    34:88:d9:a9:1b:04:a2:5a:0f:e4:73:16:1e:5f:8c:
                    40:7e:f4:c6:8c:00:06:b1:fe:97:4b:6f:91:7c:90:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:78:FA:C3:72:EE:BA:57:F1:13:50:2A:6C:AC:F3:8D:B1:B1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl

            X509v3 Authority Key Identifier:
                keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:0b:e8:d3:70:80:00:59:9f:bc:f9:81:06:80:d6:23:bb:
         b1:29:90:da:78:ae:9c:63:69:2c:06:75:04:a0:46:2c:1c:30:
         e9:4b:90:1e:44:92:37:a1:7f:32:62:4d:02:b9:a9:f2:60:43:
         58:36:6e:c2:e3:5e:0a:08:6c:88:2c:ae:d4:4a:28:d5:6b:fc:
         27:2e:cf:5b:c0:b0:47:8f:3d:fa:63:d5:7f:cf:b7:0a:06:43:
         93:ae:29:d4:09:03:4b:67:cb:f2:7c:f0:fd:b8:72:80:a9:81:
         40:d1:94:5d:f0:e9:cd:22:0f:da:f5:fc:12:61:0b:38:43:2c:
         a7:95:b7:56:8c:9b:1c:50:48:85:69:6d:ae:cf:82:da:01:cc:
         51:f2:a8:de:c4:f4:94:43:0e:17:03:50:9b:0a:19:dc:21:91:
         5c:03:f5:8c:58:8d:2d:f5:b4:0b:a6:de:03:ef:b2:49:38:4e:
         3d:fc:d8:9b:cc:0c:a2:32:57:b1:eb:ab:74:f3:23:5a:6b:d0:
         92:5b:6f:3d:b1:78:e9:72:3b:03:5a:40:6d:89:b8:88:a6:b2:
         5a:38:70:04:df:af:b6:27:40:52:07:b2:fa:3e:1d:e9:80:93:
         87:c5:27:60:ac:5b:5d:0c:d1:93:9d:51:24:aa:6b:ef:cf:03:
         f1:eb:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:13 2024 by rpki-client on console-fra.rpki-client.org