Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
File:                     938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json)
Hash identifier:          6wRXNYbo5n6Bcz8p2O9pcOG2eWUs4UxsISnB6G0B/5s=
Subject key identifier:   DC:D3:B3:15:A9:26:B5:45:07:1F:95:FE:77:C4:39:CD:ED:70:26:A2
Certificate issuer:       /CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Certificate serial:       010D0C9F4328584510502728FA0BD6ADF2350380
Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        216.120.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:27:28:fa:0b:d6:ad:f2:35:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=e5d89668-b350-415b-905b-5b065a8b5d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:f7:27:fa:c2:8a:da:23:89:67:0b:37:76:
                    b0:07:df:93:4f:93:3b:4b:54:a9:c2:fa:f1:ae:a1:
                    13:01:57:e0:af:35:55:99:8f:69:ed:6c:21:f3:fe:
                    4a:a3:62:84:61:c5:a3:db:ab:f5:f2:fe:2e:ff:69:
                    22:b9:0d:d4:69:d9:9b:a0:b4:bc:4c:86:e4:42:d8:
                    b2:a3:98:d3:3e:c7:73:52:4a:fb:5a:9c:d1:87:d5:
                    92:06:87:d3:34:d4:19:93:86:38:4e:b0:e4:d6:6b:
                    07:3c:13:70:d6:29:05:af:52:bd:b5:8d:54:a7:7f:
                    4e:0e:ec:13:a4:8a:da:1e:4c:a4:c3:cc:cc:18:b5:
                    e3:b1:1f:0c:31:52:60:94:af:de:63:13:2a:2f:65:
                    63:88:78:de:d6:04:64:30:0d:05:cd:cf:9d:15:f8:
                    7e:6b:09:64:11:3b:5b:84:e1:ce:af:0d:68:3c:14:
                    7f:b6:e9:20:30:ce:fe:cf:60:63:d1:26:71:b0:7a:
                    df:e8:b4:6d:ed:d7:c9:a8:3a:0e:11:f1:be:d9:fc:
                    a0:f4:7a:fe:02:ec:48:93:5b:97:a7:7d:a9:df:fa:
                    c7:6b:a1:4c:88:d1:46:6c:aa:fd:8b:8e:35:96:14:
                    59:5c:7e:c7:34:e3:81:ac:19:1e:ba:bc:22:3d:b5:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D3:B3:15:A9:26:B5:45:07:1F:95:FE:77:C4:39:CD:ED:70:26:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl

            X509v3 Authority Key Identifier:
                keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:be:67:51:07:d6:d2:01:04:88:06:2c:8a:f4:ec:dc:07:
         d4:22:69:e0:d5:c7:6f:5f:93:a7:c4:ba:33:74:33:32:63:65:
         13:40:d9:52:00:93:26:3c:58:7d:ae:c0:ac:7c:c0:d6:98:3c:
         3a:9e:e6:1b:0e:76:e2:9d:4e:93:6e:f6:1e:0a:c6:51:04:33:
         1e:ef:38:d2:71:6e:ec:8e:f7:3d:d1:04:da:b4:67:ae:b3:88:
         ee:0c:2f:63:2f:f4:bb:b0:6d:68:60:69:f7:85:a8:df:d9:b6:
         47:cf:e3:0a:f6:a7:d9:fb:77:35:b7:b2:ab:b8:d8:f7:6a:25:
         d2:27:3f:98:f1:80:ac:dc:f0:48:57:d2:19:68:b5:5a:98:28:
         fd:61:c0:33:db:79:6f:81:02:37:44:40:98:82:e9:f0:e1:d1:
         99:3d:c2:00:bb:7f:fa:66:79:1d:59:a9:da:5d:c6:0e:c7:b9:
         7e:50:db:f1:a4:eb:1f:94:d5:b0:26:d2:b8:18:85:12:e8:fb:
         5e:53:3c:70:b1:8f:e4:4c:b9:ed:b8:e3:03:b4:05:ea:38:03:
         33:be:71:1e:af:85:a9:b8:f1:22:1d:9f:d6:11:07:f0:da:bd:
         74:ca:aa:e4:19:4e:86:99:a9:05:08:d2:b6:38:ac:94:9c:6e:
         55:5d:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:21:11 2024 by rpki-client on console-ams.rpki-client.org