Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
File:                     20212cf5-9652-3db8-891b-2e568988220d.roa (raw, json)
Hash identifier:          n9ch8rVuWUGeO5gwdmrZ8K+2k8rPhIaSuZMH958uT9I=
Subject key identifier:   C5:99:A5:90:2B:6C:0E:34:BF:CD:15:8B:76:03:CC:7E:F7:E6:FC:61
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F43285845A15E048F45F828898F31ACC0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        172.82.237.0/24 maxlen: 24
                          172.82.225.0/24 maxlen: 24
                          172.82.213.0/24 maxlen: 24
                          172.82.211.0/24 maxlen: 24
                          192.243.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:04:8f:45:f8:28:89:8f:31:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=7bc62746-364f-4d5e-bd7c-b3087fba27a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:38:ac:53:35:3a:f2:8e:3e:7d:fd:7c:8b:
                    25:ef:dd:b4:c9:fa:e5:15:8e:c5:73:3f:b2:0e:54:
                    07:10:90:0c:13:31:0e:c2:f3:9a:e8:57:e2:65:3a:
                    43:aa:9f:fd:79:5e:6e:79:e6:c6:4b:33:8a:1d:64:
                    73:e8:e1:8c:4d:cb:dd:73:75:37:72:94:7b:b5:44:
                    01:ac:1e:73:7b:6b:20:f7:9a:63:18:8f:d5:52:c1:
                    b8:f6:32:75:1e:85:f6:e5:47:38:e2:08:74:72:de:
                    b7:5c:78:35:30:d3:55:09:62:11:4a:a8:11:f8:4f:
                    6a:28:3a:ca:41:f8:bc:c0:15:cf:d1:3b:b3:90:fc:
                    b2:01:11:84:bf:8c:67:f2:58:c1:20:c5:70:b8:fd:
                    62:28:d7:2b:ad:3e:f2:6e:0d:8c:11:5a:bc:fc:98:
                    99:a2:8a:d7:6b:9d:62:e4:41:15:c5:7e:a5:f8:72:
                    36:9d:40:d2:fc:4e:ab:43:41:ef:c6:14:29:db:64:
                    eb:16:29:42:de:f9:5f:f6:ca:f1:9b:7f:b5:d1:03:
                    76:3c:13:5e:e1:01:2d:6f:d7:01:1f:f7:b1:c9:e3:
                    a0:0a:62:c0:4d:ae:b7:9a:e5:6f:53:8c:ea:22:17:
                    45:bf:5d:38:fa:1a:eb:07:f4:5f:b5:9a:e8:5a:7d:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:99:A5:90:2B:6C:0E:34:BF:CD:15:8B:76:03:CC:7E:F7:E6:FC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.211.0/24
                  172.82.213.0/24
                  172.82.225.0/24
                  172.82.237.0/24
                  192.243.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:21:cb:33:c8:35:20:2e:fb:ff:64:5f:60:62:79:1f:dc:81:
         5c:96:98:9e:ec:d2:00:33:fc:72:8b:2c:51:03:56:d8:e1:ad:
         5d:43:1c:d6:d1:d7:85:54:28:c5:9e:53:18:4c:28:5b:f1:02:
         cb:3e:bd:4f:b3:29:93:10:70:87:42:be:69:4e:f3:8c:f6:7d:
         8a:e4:8e:51:cd:ad:d8:57:11:6b:8d:bc:56:8b:20:36:c7:ac:
         8f:58:19:72:76:36:17:88:a1:ce:1a:72:24:e6:44:e0:c5:f9:
         c1:3c:7b:ba:4b:5f:93:43:01:f0:67:ae:0f:75:85:ea:50:20:
         3b:54:45:b8:3c:f3:40:9b:d3:0d:68:90:9c:91:1c:d2:5e:23:
         9f:f7:cf:eb:e0:4d:97:ca:16:76:46:87:2d:65:89:da:04:05:
         30:d7:f5:b2:e9:8c:d8:ef:c6:90:87:d4:a5:17:74:5d:9a:a2:
         e5:7c:3e:51:43:8a:26:d3:19:6b:ec:20:9e:b6:18:86:62:cb:
         42:9c:fd:af:1a:e5:98:e6:e5:7b:63:f6:57:9b:02:82:e4:a6:
         e1:82:b2:09:3a:9d:f9:ca:88:df:89:b1:c9:89:70:2a:72:08:
         87:cf:76:6e:33:e5:bf:d6:cf:ee:ce:86:e6:c1:9d:7a:69:6f:
         0c:f6:b6:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:50 2024 by rpki-client on console-fra.rpki-client.org