Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
File:                     9db9c639-d02d-33c9-bdb4-066c23602c3f.roa (raw, json)
Hash identifier:          LbsB+yYh0sr6U/yafWarOzf0KAoDZyOB0pP2LRZW5To=
Subject key identifier:   15:89:3E:6A:15:55:B6:AC:2B:B2:80:9B:8E:28:B2:94:33:8E:16:F8
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285845304D4037D6A38E3B9F44A680
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     293
IP address blocks:        192.188.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:40:37:d6:a3:8e:3b:9f:44:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=2c4f0cc6-a3e0-4b6f-bf25-52c5607fd84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:06:b0:e7:68:bf:98:ba:67:51:17:63:d8:
                    74:b8:ba:87:12:ef:c7:e0:c4:3c:56:01:75:fb:56:
                    25:47:55:92:b2:bb:cc:1b:fb:ce:f7:0e:ae:20:68:
                    aa:78:79:ce:9f:e6:0e:c6:a7:c2:e5:74:8f:40:c8:
                    80:e3:9d:5f:d9:ee:fd:17:72:d1:7a:33:e8:ff:3c:
                    32:88:09:41:9e:48:6b:82:37:70:21:b8:7c:97:67:
                    54:3d:6f:23:6c:be:ef:45:f1:b3:f8:5c:cf:b8:f0:
                    eb:0e:1b:e7:b8:64:fd:42:2e:fe:a4:00:bd:20:d5:
                    ad:27:e6:a5:1f:30:ec:fe:82:4e:8c:39:f1:26:7b:
                    99:10:9a:f0:18:fa:ca:13:ee:87:ba:48:24:82:1f:
                    6b:4d:4b:ff:e3:87:6e:fc:38:fb:0e:66:41:0e:b7:
                    a5:99:46:a4:72:64:d3:c7:a6:11:a6:62:01:ea:c6:
                    f6:63:b2:bb:d4:be:21:88:c4:ad:b4:40:cd:89:e2:
                    58:a7:ba:1f:37:6c:0a:fe:7c:6c:8e:79:c7:5c:b3:
                    2a:6b:8b:88:b3:19:25:2b:e7:98:b1:d1:ed:d3:26:
                    ec:8a:62:27:ca:a9:e8:0f:4f:72:5f:66:d7:fb:56:
                    4b:b5:ed:e6:5b:8f:c4:41:8b:aa:35:08:d5:c2:4e:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:89:3E:6A:15:55:B6:AC:2B:B2:80:9B:8E:28:B2:94:33:8E:16:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:a9:b1:db:91:72:3c:99:83:dc:8e:ca:1c:f8:11:3c:34:
         fb:d0:04:26:49:8c:cb:b8:da:67:b3:69:2d:04:72:4c:71:c7:
         8e:e5:d8:2a:af:42:ee:f0:df:9c:be:61:e2:54:c1:b3:30:ca:
         a8:e3:d9:27:33:08:81:1f:7a:f0:73:68:f3:23:62:1a:fb:6e:
         de:ff:b5:67:8d:28:cf:ad:02:b1:89:15:3d:9e:ff:5e:8f:3f:
         85:1f:1b:39:b7:49:6c:b7:d5:a9:4a:93:5a:01:f0:cb:c0:9c:
         0c:7d:4c:c1:e5:8f:ef:7e:54:e8:3a:82:e6:bb:31:f7:0f:57:
         e7:cc:47:a5:14:69:0e:f7:63:a2:6e:56:22:b3:7c:a5:69:cb:
         9d:da:5b:9b:b2:c3:c0:63:a0:e0:76:cb:50:37:b2:89:ad:39:
         cc:3c:69:8d:67:5d:8f:60:cb:f3:0f:1b:71:6f:80:d9:70:23:
         1b:4f:df:ff:f0:d4:16:3e:be:60:6c:f1:64:d0:b0:b2:78:c5:
         33:39:88:81:66:e9:de:e7:c3:35:74:6d:02:0e:ee:e0:4d:e9:
         d2:f2:2a:7d:c6:18:69:8e:a2:6f:5b:35:39:a7:b2:94:2b:9b:
         2d:81:61:46:d8:da:00:40:51:3b:75:82:81:e5:8d:aa:e6:2f:
         39:ff:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:56:41 2024 by rpki-client on console-fra.rpki-client.org