Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa
File:                     8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa (raw, json)
Hash identifier:          jdboAL+lQbvcDYoe8pSZ3fieH0/DqmDEMoOySrNAAjo=
Subject key identifier:   17:8F:9C:34:46:31:F6:60:18:64:F6:38:31:65:04:C1:65:18:A3:79
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584574B317897312834A82161440
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     13984
IP address blocks:        216.213.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:17:89:73:12:83:4a:82:16:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=27e5187b-a31e-4496-a316-5976a92bb75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:e2:66:79:37:f3:43:fd:f0:c1:9f:44:ab:
                    d0:5c:2b:a1:bf:fc:fc:eb:7e:64:8e:2a:2a:0d:cd:
                    2f:46:d7:27:b5:0d:1a:84:6b:68:92:5f:e8:dc:17:
                    03:f5:43:2f:c3:76:f5:33:be:2d:25:b1:6d:1c:25:
                    37:2c:83:00:fe:31:5b:aa:71:6a:fb:a8:80:58:08:
                    55:f8:b0:42:68:c0:0c:0a:cb:99:82:3f:db:67:b5:
                    32:19:96:08:3b:65:f2:1c:6c:31:d3:ca:b0:5c:2d:
                    ad:57:c7:cb:52:51:d3:bd:91:12:e8:d1:8b:6d:c9:
                    7c:11:03:3c:fb:ed:51:a3:30:e7:0b:e5:83:30:ac:
                    92:6c:18:a2:ae:d3:2c:42:7e:da:18:02:ff:36:9c:
                    68:cf:e0:87:31:08:db:d6:fe:4b:90:82:41:a8:49:
                    56:78:92:bf:32:6f:25:8b:fc:d2:77:1c:e6:2f:f3:
                    30:8a:b1:ab:9c:82:c4:ba:8a:5c:fc:98:8d:7d:b2:
                    0a:bd:ff:c7:56:4b:e4:e1:5e:ca:10:d0:e9:0a:fa:
                    22:29:ad:65:e0:92:87:88:3c:d9:9b:20:73:18:81:
                    77:1c:c1:6a:69:71:67:12:7e:25:d0:49:27:7d:43:
                    8c:7a:45:e2:28:80:6e:37:75:02:02:e3:ce:5e:0e:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:9C:34:46:31:F6:60:18:64:F6:38:31:65:04:C1:65:18:A3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:7b:93:5f:1f:35:7e:33:50:08:06:ed:02:5e:2e:c8:fb:
         1a:d6:e4:84:e8:a5:95:46:d0:39:b0:4a:0f:3f:fa:2f:3b:a1:
         46:ef:35:f3:02:5e:d8:ab:b1:20:da:5c:e8:c9:fa:e0:ba:53:
         62:57:23:23:d6:bf:8f:ab:19:d5:db:b7:0c:b6:8c:35:af:bb:
         11:e6:28:e2:b8:46:e3:35:4e:d3:63:2d:a1:c3:b4:82:8b:c8:
         16:ab:4a:8b:54:47:88:66:8e:57:25:56:b2:36:8b:04:01:66:
         64:b6:ec:38:85:a8:5f:4c:52:4c:91:c3:00:5a:ef:0b:a8:45:
         0c:9b:19:b1:2a:c4:18:7f:6d:f3:34:f3:35:be:76:39:07:b0:
         a4:df:a4:e1:75:8d:1a:54:17:9a:af:f8:8a:97:68:51:7c:55:
         f1:38:8c:68:17:6e:73:02:ed:0d:9c:c1:85:f8:10:cc:64:94:
         d2:17:8f:89:67:d6:26:58:8b:06:3f:1d:72:dd:60:32:3b:39:
         1c:3a:a8:f9:b5:da:d5:af:04:2f:17:1e:c4:3c:78:47:8c:4b:
         a8:be:d8:5d:44:ed:37:4c:88:dd:7a:97:73:7d:72:9c:fd:88:
         ce:b9:cd:92:e3:ef:4c:7f:f4:d4:ee:d0:1b:8a:0f:e2:48:79:
         6a:dc:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:54 2024 by rpki-client on console-fra.rpki-client.org