Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
File:                     7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa (raw, json)
Hash identifier:          ICojZersZLUWo6FnoDaHLwWiiJwihmVEbvkbCwInrWM=
Subject key identifier:   60:AB:A8:29:80:26:55:51:64:CB:EC:86:43:A1:43:22:AC:18:4F:14
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F432858457A488643998CA243432CE980
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     25945
IP address blocks:        162.253.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:86:43:99:8c:a2:43:43:2c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=58de1ca1-275a-4a0b-b1f9-a1e66ff1b87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:0a:72:d7:f4:3a:35:cf:c9:e0:da:40:f5:
                    a8:18:c6:40:a5:e2:33:b7:a5:41:aa:e8:10:39:ce:
                    14:4b:12:64:7e:22:f7:18:04:3f:25:95:87:7d:3a:
                    7b:6f:09:8e:75:fe:fe:7f:f8:d0:d4:d4:1a:f0:da:
                    0d:9c:9d:7c:fe:2c:3e:26:12:17:3c:67:e0:58:0f:
                    4e:bf:a9:f6:42:91:86:e5:36:09:3b:50:48:75:23:
                    8e:ff:b0:cb:84:16:3e:1f:7a:85:51:e0:3b:c7:72:
                    d0:ca:d2:f5:4d:b9:97:ef:ba:7a:2c:63:0f:f5:31:
                    45:7a:89:6a:8e:e5:bd:cd:c8:13:15:f0:e7:92:21:
                    f8:1c:4c:09:c4:2e:39:df:cc:da:cd:3a:09:d9:b2:
                    8e:d8:ed:c4:12:f8:09:84:19:dd:80:19:8a:27:5b:
                    0d:4f:3e:9a:9f:54:77:ff:e5:56:9a:80:49:b0:08:
                    73:0f:b6:e5:93:4a:93:90:55:b0:d4:0f:e3:00:b0:
                    33:1b:42:3c:e6:0e:2a:68:c8:78:db:9c:f1:5b:c5:
                    67:37:04:d9:57:4a:f7:22:2b:89:4c:49:ed:71:f8:
                    17:1d:4b:fe:03:69:0e:c2:eb:c5:6a:0f:8d:fe:c9:
                    1b:b9:2e:ab:9c:5d:56:97:14:25:f7:f5:46:d5:a2:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:A8:29:80:26:55:51:64:CB:EC:86:43:A1:43:22:AC:18:4F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:24:27:4d:6c:19:9f:dc:66:4a:56:08:69:0c:bd:3a:6c:
         87:67:f5:c1:40:c4:e5:c0:ec:33:10:c3:5a:96:17:f6:2e:1a:
         3a:c9:9d:ee:a0:88:2d:4b:45:33:1b:25:3f:2b:6e:aa:bb:99:
         ed:13:79:0c:d0:f0:e5:09:d5:44:28:99:9d:39:7b:6b:44:43:
         4c:b3:69:b2:81:9f:be:04:69:3a:1a:27:99:84:54:d6:6d:7d:
         31:ce:ef:de:5b:07:b2:dd:1a:34:87:41:ef:a5:3f:21:ea:ff:
         cf:19:69:9a:2f:bb:a0:17:78:56:54:24:77:3c:96:80:e0:3b:
         4c:f2:0a:a1:a9:4e:7f:1f:da:cf:d8:8e:ab:27:d9:7b:bb:d6:
         05:f5:fc:fc:dc:6f:ce:5c:aa:e6:13:42:c1:ce:b7:c7:cc:2c:
         aa:0b:7e:aa:d3:53:18:11:5a:a2:3b:dd:f3:42:b9:c0:05:0d:
         ad:09:24:69:1d:a5:a5:de:e8:d4:60:b4:3d:66:c3:af:aa:1c:
         b0:52:8b:8c:79:b8:3c:32:bf:44:b8:ab:91:8e:f4:e9:5c:0f:
         f9:26:26:c7:f5:bb:8a:92:77:19:92:20:86:19:91:a0:a2:08:
         81:a5:75:09:0f:5b:5a:62:af:cf:52:8e:8d:48:79:59:8a:33:
         b8:b3:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:49:16 2024 by rpki-client on console-ams.rpki-client.org