Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa
File:                     bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (raw, json)
Hash identifier:          jolHLNG8yxXiYwlhBQ5QTtuBpZN0NxdbzqQMBKXuR0c=
Subject key identifier:   93:47:5C:63:64:92:E5:C9:5E:2E:2E:0B:04:A1:0E:26:5F:FC:C3:C3
Certificate issuer:       /CN=aac421ae-305b-4a29-aacc-176ba3fca213
Certificate serial:       010D0C9F4328584582A88840BDC9C7D5400D30E0
Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        168.100.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:88:40:bd:c9:c7:d5:40:0d:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=cc069a98-13c7-4071-9f5b-7191edc904cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:6e:86:1e:cc:99:bd:e9:e8:9c:37:20:45:
                    1e:d8:e4:3f:94:84:c1:20:ca:f4:f7:24:5b:e2:02:
                    51:3c:e7:9e:4f:bd:84:3b:41:f4:7d:d6:47:44:1f:
                    c4:f7:68:c9:cf:b5:62:07:27:44:a3:c4:46:28:f1:
                    52:88:ec:53:fc:93:bc:f0:97:90:d3:71:15:32:3a:
                    e6:0b:2c:84:18:92:d4:d3:1c:f5:8e:f1:10:1c:a9:
                    1d:13:1b:89:63:8e:10:6c:c9:51:95:8e:93:ca:01:
                    7d:76:32:9d:b3:22:cb:c6:3e:22:9e:fb:52:b4:11:
                    1c:2d:cb:db:10:d0:f1:4b:01:8e:21:b1:e5:eb:7f:
                    6c:c7:49:ca:c2:ad:53:23:1e:bf:39:9b:99:0d:cd:
                    12:2f:0a:40:4e:bc:1d:06:43:2e:1c:64:45:68:8b:
                    fc:03:85:63:02:f2:3f:5a:07:ef:94:69:88:cb:74:
                    6b:4d:54:26:5a:50:54:87:67:02:57:77:dd:f8:ae:
                    8c:2b:c7:81:aa:72:18:e7:58:9b:ab:e1:a4:86:5a:
                    1d:c3:e1:bb:17:53:62:aa:c2:01:4d:52:0c:b3:81:
                    b8:bd:95:95:47:af:5f:68:74:bd:a1:17:2a:1c:0b:
                    5a:12:67:d7:09:fa:21:77:16:b4:5a:b3:1d:53:b6:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:5C:63:64:92:E5:C9:5E:2E:2E:0B:04:A1:0E:26:5F:FC:C3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl

            X509v3 Authority Key Identifier:
                keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:97:03:8a:3f:61:ec:c2:94:1c:b9:c0:35:ee:01:7f:26:f1:
         ea:55:c3:9d:0d:f6:17:e6:47:c8:20:b6:d8:97:57:c3:69:80:
         75:02:cb:1a:06:49:7f:49:66:d3:f3:7c:60:73:98:0e:20:d0:
         9f:3e:66:b2:fa:9b:1a:75:6e:0c:6d:e6:09:0c:8e:f4:e8:44:
         fa:51:d7:e9:c8:b8:ea:84:28:80:a1:4f:dd:51:a1:83:9d:1c:
         f0:55:3e:3f:ca:e6:bd:24:c4:65:21:ee:7d:8c:e9:e3:5f:fc:
         ca:17:37:2f:12:f7:5b:ab:72:ff:77:24:f3:64:f8:83:33:0f:
         8a:ef:c0:3e:11:c0:80:e7:92:d4:d2:f0:f0:7c:b2:43:45:65:
         b3:e7:29:e2:1a:3d:53:44:9a:e2:f7:a7:d4:ef:fa:8c:dc:f8:
         de:17:ca:fb:ed:35:18:69:26:d6:f4:91:02:6e:31:f6:f2:1c:
         9c:21:76:c0:69:1f:ef:04:12:0a:ee:68:e5:fc:cd:ab:df:4d:
         96:35:2c:e8:95:f9:70:0d:46:05:39:e8:cb:26:20:83:9c:f5:
         94:c5:aa:22:f0:96:e3:8d:a4:f1:fc:75:35:8b:b1:12:2e:ed:
         19:7e:50:3d:41:ef:78:e1:07:ac:4e:95:75:c8:3d:05:df:d0:
         ef:4e:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:48 2024 by rpki-client on console-fra.rpki-client.org