Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa
File:                     918e9dad-ae1a-3040-a622-c2db2aa69da8.roa (raw, json)
Hash identifier:          0x0TuGv1odKA7P+PpjgSITjrb1QZXcI0aDQmZJfNtrY=
Subject key identifier:   89:35:BA:7F:F1:03:65:A1:3E:C4:62:48:20:6A:B1:D6:E6:EC:16:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FDD25E5586BF2BDF7100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     17359
IP address blocks:        208.89.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fd:d2:5e:55:86:bf:2b:df:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=96091447-03ef-4177-89c6-ba98bf08883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:a2:7d:81:73:04:36:f3:52:90:08:80:96:
                    41:7a:a3:84:c5:3c:94:98:e1:a3:33:04:c8:72:a7:
                    a8:70:6b:78:bc:cd:20:eb:d4:a0:89:f2:f2:7b:ab:
                    b6:24:bd:9b:84:3b:de:a5:3a:67:2d:1e:2e:6e:c6:
                    88:bf:d0:28:ed:cc:c4:14:30:68:0d:26:2d:9b:d2:
                    d0:76:61:b3:da:f2:f4:6e:2c:dd:43:2e:56:0c:a5:
                    99:1c:27:90:62:76:ad:97:a7:db:45:5c:9a:0f:b5:
                    66:21:94:a3:c2:2c:27:ea:bc:68:ec:4d:3f:1f:4d:
                    47:b0:52:7e:6f:ca:c9:04:cc:bd:af:74:87:41:36:
                    b4:d0:76:0f:fb:2b:58:bb:ba:4b:5e:c1:48:f3:9a:
                    d8:df:11:f9:cc:76:9b:8e:e8:51:bb:21:84:68:4f:
                    dc:bf:cb:4a:82:b1:ab:b6:59:fd:b6:76:1b:64:3e:
                    df:84:6e:10:d0:b3:65:0c:24:65:a5:4f:9b:02:4c:
                    5f:b1:50:fc:f5:d3:54:4c:44:81:82:f8:bf:37:fd:
                    28:ec:9a:78:e1:49:c4:6f:a4:68:7a:f9:6e:cb:f3:
                    10:13:bd:19:99:bc:d4:70:b8:77:e6:af:5b:bf:15:
                    5e:a2:08:b3:52:62:25:33:04:a6:61:f2:9a:b8:3d:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:BA:7F:F1:03:65:A1:3E:C4:62:48:20:6A:B1:D6:E6:EC:16:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:cb:c0:39:d3:c5:d7:e0:72:dc:30:3e:bb:8b:a8:6b:42:
         75:9e:4e:a8:fe:69:6e:b2:0d:c2:3b:8b:d7:f8:94:86:d6:8c:
         c3:16:b1:c0:31:52:9e:81:cd:a3:1e:77:7c:84:48:52:29:13:
         8a:60:5e:75:3c:f1:b7:f5:0e:ca:e5:7d:b7:2b:37:79:c8:bf:
         a5:3e:2c:07:c3:86:9b:e6:b0:96:a3:c1:24:7c:48:d0:62:83:
         40:78:e0:85:f7:f5:cf:a9:60:d3:33:8e:e3:da:b6:1a:26:62:
         2b:6e:e2:46:7a:7e:69:c3:ba:01:df:2b:5a:9c:9f:29:22:55:
         ad:1f:23:9e:8e:4c:b1:5e:da:7b:3d:25:25:cf:66:4e:68:ab:
         2b:28:8b:2d:6a:42:d3:11:8b:c0:ab:52:e5:0c:cc:e9:95:43:
         c2:4b:3a:ab:72:ee:67:82:8b:ef:6a:04:0c:a7:de:39:29:46:
         ff:ec:27:35:45:3a:9c:60:3a:41:df:65:6e:ad:aa:0e:53:61:
         c6:e9:21:4f:b2:d6:e1:21:2b:b1:75:7a:94:68:d3:f6:8c:d4:
         4c:27:21:66:d0:cb:21:cf:1f:24:5c:d2:fc:b7:32:a4:bd:ef:
         4e:b5:bb:c5:5b:a4:92:61:82:b4:ee:e5:c3:4d:13:ec:f8:75:
         55:75:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:13:34 2024 by rpki-client on console-ams.rpki-client.org