Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f202638-de95-38d1-9a6c-b331a95dd58a.roa
File:                     3f202638-de95-38d1-9a6c-b331a95dd58a.roa (raw, json)
Hash identifier:          EU6ra/g2Kkgtk6ZRmYtACeaaOwMl6eZ7CIv775j6REk=
Subject key identifier:   2C:C1:7B:93:7B:A7:45:FB:40:55:C6:8E:1C:CA:5E:C9:7D:76:20:2E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584599573F88BE6E2C8BA8E84140
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f202638-de95-38d1-9a6c-b331a95dd58a.roa
Signing time:             Fri 19 Apr 2024 16:00:33 +0000
ROA not before:           Fri 19 Apr 2024 16:00:33 +0000
ROA not after:            Thu 18 Jul 2024 16:00:33 +0000
asID:                     14315
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:57:3f:88:be:6e:2c:8b:a8:e8:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 19 16:00:33 2024 GMT
            Not After : Jul 18 16:00:33 2024 GMT
        Subject: CN=14b4977d-ccd9-41b1-951c-469c13190723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:bd:38:c3:c1:dc:d1:80:d0:28:39:86:41:
                    87:a0:f3:74:1e:64:67:01:d2:d6:16:68:63:96:f8:
                    01:27:9d:44:da:f4:6e:3a:ac:09:45:14:48:0b:6c:
                    a3:cb:d9:bb:f8:86:80:1a:3c:2d:31:95:df:b9:5f:
                    c1:77:bc:05:af:3d:82:93:32:dd:b4:38:1f:01:06:
                    dd:5c:32:db:c6:17:40:c1:ec:67:fd:7d:4b:58:0f:
                    e8:8e:4e:4e:0f:d3:09:08:f8:8d:8e:4a:1c:26:88:
                    b6:90:f8:06:13:83:ff:85:5e:27:84:d5:12:3f:62:
                    3b:73:04:ba:f2:4b:0a:11:95:de:1a:89:bc:0c:e1:
                    37:16:71:e4:c2:22:9d:cf:0d:6c:41:4f:6e:00:6a:
                    1b:64:b9:e8:55:82:ad:a0:fd:23:88:b2:ec:5e:6a:
                    e3:33:47:5d:2b:2b:43:4c:1c:af:cb:0f:93:da:38:
                    05:79:dc:77:fe:cd:20:e2:9c:fc:51:9b:24:d2:df:
                    da:2d:0d:bb:a7:48:16:f2:2c:01:a9:fc:f1:74:41:
                    15:70:f4:45:bc:4d:24:a6:44:48:4e:df:05:65:ab:
                    eb:4d:fd:d7:05:23:67:7d:77:32:bb:cb:b7:c7:e3:
                    e4:20:e3:1a:00:56:3e:0f:86:97:db:9e:68:ef:e8:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:7B:93:7B:A7:45:FB:40:55:C6:8E:1C:CA:5E:C9:7D:76:20:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f202638-de95-38d1-9a6c-b331a95dd58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:25:e7:80:9c:27:73:88:0a:ad:1c:a7:a3:2b:cc:7b:df:a9:
         76:0d:2a:d3:44:50:48:92:6b:fd:95:46:50:36:92:24:f4:d3:
         02:e7:aa:3b:20:b6:01:af:f1:d4:19:36:a5:9a:fc:82:e3:3c:
         4d:27:89:72:0e:a3:46:e4:38:af:ca:5e:03:e6:81:55:0e:86:
         74:0b:81:37:71:da:3e:4c:9c:62:a2:ec:4b:63:8b:0c:09:2e:
         f3:ff:fd:42:e4:16:2f:36:d6:21:62:ea:52:c8:91:6a:15:05:
         a1:a9:ab:ab:96:2c:a2:f0:2f:84:b9:27:0b:1a:01:dd:03:4b:
         1f:fd:32:91:ed:21:e4:f9:bc:10:5a:a3:ae:47:25:98:f6:02:
         a5:58:53:5f:b6:fd:68:d9:a5:15:1f:38:17:eb:6a:52:73:b7:
         5f:c4:18:42:1a:4d:a2:fa:1d:05:73:40:c8:1a:4d:bc:67:69:
         ef:63:b2:f1:99:2e:ef:2c:19:02:f4:5d:9c:2b:1a:3b:79:12:
         e5:27:e2:0c:62:b5:9a:87:66:27:62:1b:b7:e6:b4:64:00:25:
         91:38:78:67:f4:a9:7b:a6:ce:24:db:97:30:3e:55:8f:a1:e9:
         a7:3a:de:14:09:20:54:3d:3c:ee:e0:8c:e0:2f:ed:21:a1:3e:
         3a:5c:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:46 2024 by rpki-client on console-fra.rpki-client.org