Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/ad259b8a-bcc5-37d0-9601-b4e38326e8ab.roa
File:                     ad259b8a-bcc5-37d0-9601-b4e38326e8ab.roa (raw, json)
Hash identifier:          InNjrilR9ErscttVAefnC05tj8HDrg7QxBFD7okkgnA=
Subject key identifier:   F7:48:AA:24:96:5B:DA:D2:E3:97:6A:ED:C7:6E:1F:5F:ED:0E:03:D5
Certificate issuer:       /CN=fc9f4430-0302-4502-ba1d-52836c0222ae
Certificate serial:       010D0C9F43285845347D4B91072F24EE761175C0
Authority key identifier: F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/ad259b8a-bcc5-37d0-9601-b4e38326e8ab.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     393238
IP address blocks:        192.251.94.0/24 maxlen: 24
                          2620:b1:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4b:91:07:2f:24:ee:76:11:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f4430-0302-4502-ba1d-52836c0222ae
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=88e025e5-0e34-47a8-a70d-4a3cc5afe082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:d2:c5:d1:df:69:40:ca:5b:93:b6:0f:8f:
                    a7:02:90:e6:3a:08:e4:89:af:ec:f6:5e:5b:71:f6:
                    5e:91:c4:2a:c3:b2:8c:29:27:1e:dd:a3:af:e0:e9:
                    8e:2a:47:2a:50:28:c3:f1:2e:62:92:11:1f:50:1a:
                    d9:44:30:6d:a2:b7:6c:f0:19:7f:fd:a3:d5:61:00:
                    b0:c9:fc:17:26:bc:f0:20:53:dd:01:bc:71:ea:be:
                    76:70:c0:5d:28:0f:04:e3:b7:72:fe:86:29:44:47:
                    c0:45:3f:1e:d2:e7:b7:c4:67:a4:09:fd:a5:5d:f4:
                    10:8f:0b:f9:29:4d:1d:4d:23:d5:7e:2c:6c:1c:e9:
                    bc:ea:e5:31:bf:60:43:48:a8:0a:58:6e:a8:d7:43:
                    19:07:a1:22:55:d8:26:db:18:b2:82:6e:38:a0:a0:
                    98:7a:c9:e5:52:09:27:7e:29:94:a9:2a:6c:e4:fb:
                    fe:7b:80:c8:63:76:6a:5d:9c:8a:73:bc:0b:c6:9e:
                    36:03:75:e7:78:1d:75:1a:8c:50:32:c2:02:5a:56:
                    47:41:85:36:5e:bc:18:69:f7:36:c6:59:0a:fb:1e:
                    66:98:fd:ec:94:a7:6f:5a:88:f4:8e:5d:89:dc:f7:
                    00:b8:ff:72:59:c0:24:03:a7:05:e5:17:b0:5b:76:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:AA:24:96:5B:DA:D2:E3:97:6A:ED:C7:6E:1F:5F:ED:0E:03:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/ad259b8a-bcc5-37d0-9601-b4e38326e8ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.94.0/24
                IPv6:
                  2620:b1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d9:22:1a:5f:d5:59:8f:0f:d8:ac:36:ee:e8:df:8f:b0:96:
         2f:cb:91:08:b6:d7:49:0a:90:4a:7d:07:58:2d:19:50:16:75:
         e0:e5:b0:5d:56:83:d1:2e:30:c0:59:9d:5b:d3:a4:60:e2:b5:
         65:8a:5b:7f:a5:6d:8d:fc:4e:18:12:2e:95:6d:51:b5:91:35:
         3d:d9:7e:68:e5:5a:92:e0:82:27:1a:d2:1f:d6:82:61:07:27:
         51:bd:c8:d0:59:89:15:ff:de:a9:34:9f:4f:b2:df:02:98:2e:
         e1:c5:5e:29:3c:03:e0:b7:65:72:73:e4:83:12:14:0a:34:90:
         2b:ce:66:0f:8f:27:e6:48:72:01:0c:47:2b:a2:29:c2:1b:9f:
         73:6d:26:52:d7:c4:28:ca:a4:18:05:5d:73:80:dd:1b:8e:fe:
         97:17:28:fb:a1:1e:ee:c2:84:cc:96:97:81:c7:02:78:d6:d5:
         31:47:36:ca:21:85:65:19:b1:d5:cc:71:89:ca:0b:ca:9e:bd:
         e6:e3:0b:e8:1a:79:13:fc:f4:eb:ad:c0:af:07:77:49:b8:7d:
         df:d2:8e:72:b2:d4:0c:70:4b:64:8e:45:50:5c:c9:77:a7:b0:
         18:13:67:e1:c1:ad:0e:de:53:2c:18:73:07:4d:d3:22:93:a6:
         5f:39:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:26 2024 by rpki-client on console-fra.rpki-client.org