Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa
File:                     3fb48407-4606-35a4-99e8-1568ddbd9809.roa (raw, json)
Hash identifier:          q50DYf5vJPO44kpqeaN8aUObQ+oijg+cNjtuMMkYKOo=
Subject key identifier:   B3:9F:AB:2B:B1:CC:33:7C:EB:03:5F:E1:32:56:C4:82:1A:3E:F1:95
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2CAB998CDED1223856340
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        209.124.88.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ca:b9:98:cd:ed:12:23:85:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=a6beb258-bc66-410b-9b99-a8b567ff9c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:b4:fd:88:e0:dc:f5:d7:07:d1:68:04:a1:
                    b3:be:91:8a:8e:f6:77:0d:30:16:35:97:23:ef:94:
                    49:31:f6:c2:8f:a4:d8:89:70:c4:d0:9a:76:98:8e:
                    60:05:81:f0:cd:72:57:a9:dc:c1:7f:35:ea:ce:2a:
                    49:13:7b:15:25:39:0c:84:0e:ea:9d:0d:d6:ac:7d:
                    3f:21:e1:52:d4:7b:74:43:6e:ba:90:cf:58:4f:77:
                    50:63:c6:83:61:ef:5a:35:f3:55:38:26:21:16:25:
                    69:e0:74:f4:55:01:36:8d:35:d0:8a:87:1b:cc:91:
                    b4:44:77:fd:ed:af:df:02:ae:c7:e4:c6:4f:21:b7:
                    e6:48:48:ef:db:d8:7f:61:89:b4:d8:8c:64:ae:71:
                    6d:56:84:56:79:73:19:70:15:7c:ae:52:0b:94:b5:
                    74:da:e3:36:f8:6a:a1:ee:b6:5d:16:9b:b1:0b:d9:
                    8a:4f:08:03:b4:1e:23:8f:46:43:bd:4a:2e:db:23:
                    50:02:6a:d9:19:b6:a0:76:30:e7:75:f9:9b:47:a7:
                    97:d7:38:b3:39:2f:6b:48:40:de:76:3a:30:fe:ba:
                    b4:7b:4b:74:d9:26:28:4a:96:fe:8d:1f:cd:b9:79:
                    0c:64:2d:34:46:41:9c:cd:e2:a9:0c:81:74:26:01:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:AB:2B:B1:CC:33:7C:EB:03:5F:E1:32:56:C4:82:1A:3E:F1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:96:13:c2:da:7a:dc:54:4b:76:e7:9c:5c:6c:5e:48:cb:86:
         b2:1c:e0:ef:50:7c:a7:f5:b0:ea:4c:89:c0:37:34:6d:4f:76:
         a9:fa:ad:19:71:fa:3d:6c:35:18:24:8f:a3:e3:f1:40:93:35:
         57:b7:04:a1:98:3f:21:6a:6e:5c:a9:75:b0:6b:65:ee:50:b7:
         29:f4:4d:fb:e7:4f:20:30:0b:78:83:22:62:8b:7c:76:e1:0e:
         f7:6e:57:e6:ca:73:ff:f5:4a:fd:36:5a:e5:46:2e:b4:f9:c9:
         4e:15:0d:59:8e:ef:ee:bc:7e:fb:9f:7e:d9:ae:7d:90:e0:21:
         bc:5a:6a:29:67:65:57:f7:63:ac:6e:a0:d7:b7:ca:83:79:31:
         e9:fb:4b:20:58:56:fb:c8:94:b2:b1:3a:2a:1b:68:78:92:3f:
         9f:3b:80:7a:62:5a:4b:33:5a:c8:ee:0f:aa:ed:57:4b:04:45:
         0f:b7:8e:d6:11:af:ff:a9:17:79:ae:db:76:5a:0d:39:e7:d9:
         32:d2:86:10:1e:72:83:50:09:3b:4e:3c:16:70:55:ba:90:36:
         d8:d4:9a:5d:04:ee:85:00:7d:29:21:80:64:23:26:3c:0b:bd:
         b6:38:f0:a9:73:c3:ca:6b:e6:1b:09:9d:06:dc:b3:ba:e5:1e:
         6c:27:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:35 2024 by rpki-client on console-ams.rpki-client.org