Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59306096-a467-3ebb-8e95-5e8dd8fbe23c.roa
File:                     59306096-a467-3ebb-8e95-5e8dd8fbe23c.roa (raw, json)
Hash identifier:          XXdG0uNGQ/zMxzAeHfNDBhAsF80zRYcIB2vFG+RldyE=
Subject key identifier:   26:55:59:97:48:62:56:38:44:53:48:4B:39:00:54:EA:FA:10:45:97
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845E45E74EA2EF176CFF9C4AD40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59306096-a467-3ebb-8e95-5e8dd8fbe23c.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     393966
IP address blocks:        209.87.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:74:ea:2e:f1:76:cf:f9:c4:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=5200c48d-3088-4da4-b613-898848cea9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:c9:25:6a:59:ab:7b:f3:3c:d0:e8:ca:e4:
                    06:49:79:a3:81:57:12:65:b8:9d:59:5c:54:e4:f6:
                    8f:bc:6b:67:34:55:b1:77:29:9f:63:a5:03:cf:fb:
                    41:c4:94:3f:ae:72:0d:3b:33:aa:13:42:4a:a0:bb:
                    a8:ac:77:af:42:e3:20:1c:38:d0:f4:ea:33:9d:21:
                    d1:16:9f:53:7a:54:22:e2:db:51:63:a2:c2:a5:f2:
                    b2:3d:4b:c4:af:52:9b:18:cb:53:39:a3:a3:38:4b:
                    64:68:d9:52:b9:e3:c0:fb:75:16:8d:2b:2e:49:d4:
                    f4:ae:0f:81:49:7d:52:7b:12:ea:a8:48:62:96:b7:
                    3a:9b:45:e2:17:e7:a7:08:46:79:91:99:d3:67:45:
                    9e:71:37:89:fe:02:e6:f6:c6:d8:43:e1:c8:8f:3e:
                    2b:a0:66:8a:df:50:95:fe:8e:f3:72:7f:3f:e9:eb:
                    e6:0e:3b:1c:4f:a7:5b:cc:53:25:08:c6:1d:a3:32:
                    20:37:7c:fd:63:8e:e7:d6:b9:40:51:ca:8d:08:47:
                    58:fc:dc:48:eb:c7:9c:30:15:0c:b6:f9:8f:63:9f:
                    2e:25:f3:4d:0c:45:ae:f3:41:53:94:84:9b:c7:88:
                    83:f2:e1:47:a3:4b:93:69:a2:13:d7:ea:16:2e:30:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:59:97:48:62:56:38:44:53:48:4B:39:00:54:EA:FA:10:45:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59306096-a467-3ebb-8e95-5e8dd8fbe23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:43:05:9b:b0:af:b0:57:2f:57:f9:fc:11:96:a5:ad:47:71:
         97:07:d5:d3:13:97:33:2a:ee:4a:5d:71:21:3d:67:c0:46:fd:
         73:a9:72:df:42:40:da:e2:c5:9f:9d:64:6f:92:37:fc:d4:39:
         d5:0a:cf:45:d3:12:23:7e:ed:b8:7f:35:ea:fd:71:ab:28:63:
         5a:5b:1c:9e:1a:bb:46:7e:5a:3a:b4:ea:81:a0:15:a2:36:fa:
         96:97:3a:a1:1d:8b:a2:f0:03:a1:cc:02:96:97:88:40:3b:69:
         47:55:e9:5d:53:00:f2:e7:19:ce:7e:d7:bb:5b:40:67:ce:25:
         33:79:fe:56:28:4d:b8:bc:82:53:63:4d:3c:c9:44:20:e4:d5:
         ea:1b:ad:06:8f:4e:a9:e0:ae:45:04:26:20:cd:50:49:87:fb:
         2a:26:98:15:fa:2f:1f:23:33:e5:0b:31:1a:b5:2b:60:5f:39:
         10:2a:6e:89:dc:d3:6c:f6:e9:46:fd:3a:34:ba:80:5b:b2:53:
         09:90:98:b6:1a:07:8c:b6:39:5a:f0:67:9a:33:24:af:dd:24:
         55:0e:aa:01:cd:c9:72:91:41:67:63:e5:a4:08:ba:d0:c4:3f:
         0a:20:96:28:ac:83:17:f2:b4:85:8c:be:9c:b5:1c:4c:a9:35:
         e4:c2:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:14:27 2024 by rpki-client on console-ams.rpki-client.org