Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa
File:                     fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json)
Hash identifier:          x1W6UyClmuvadDf9PZOQN2nd8Bi3Zq4BIcjZWzo6i2w=
Subject key identifier:   68:93:AE:01:17:C7:59:B2:99:A7:1B:7C:96:97:94:B0:63:49:75:EA
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584531C8CACCC8B14972078659C0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa
Signing time:             Wed 13 Mar 2024 13:45:15 +0000
ROA not before:           Wed 13 Mar 2024 13:45:15 +0000
ROA not after:            Tue 11 Jun 2024 13:45:15 +0000
asID:                     3738
IP address blocks:        192.250.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:c8:ca:cc:c8:b1:49:72:07:86:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar 13 13:45:15 2024 GMT
            Not After : Jun 11 13:45:15 2024 GMT
        Subject: CN=879e1a3c-6f92-444a-9f6e-40f25437b934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:0a:da:78:24:0c:42:97:5c:02:89:24:40:
                    91:21:62:96:06:a1:d2:a0:e1:60:9e:89:22:4f:c6:
                    ff:bc:5a:48:e0:13:09:46:1e:7a:b9:4f:ac:83:9b:
                    3a:eb:a2:4a:e8:d9:da:64:c5:51:c8:3b:fd:92:24:
                    e7:88:34:da:1b:d6:d9:81:ca:0e:6c:d6:8d:08:09:
                    f4:e6:2e:50:92:89:9b:54:fd:bf:57:6a:dc:0c:af:
                    9b:08:ea:60:69:68:dd:27:e1:32:62:58:85:72:4e:
                    06:ef:77:bf:db:97:5f:92:81:76:77:80:1e:15:1f:
                    1d:c3:98:46:57:00:47:3a:ea:84:3e:7b:28:86:39:
                    ff:fa:7f:a6:51:b3:e4:2b:20:74:b3:b0:bb:67:0a:
                    23:eb:83:ef:38:9d:23:62:9c:23:7d:bf:1a:c6:96:
                    51:be:45:22:38:aa:fb:e7:6d:40:3c:c8:78:e8:e5:
                    5a:ae:44:39:cc:52:61:b8:ce:1b:89:98:91:7d:e8:
                    24:c7:97:77:b3:19:48:d3:c6:c6:c5:03:01:70:06:
                    3b:ec:9b:10:59:27:55:9f:4a:f3:94:e6:22:06:2f:
                    15:27:80:9d:f9:59:11:ef:44:58:65:85:b0:08:b6:
                    40:78:11:00:c4:9d:13:df:06:30:4a:7e:ea:67:57:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:AE:01:17:C7:59:B2:99:A7:1B:7C:96:97:94:B0:63:49:75:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ab:10:ec:11:cc:e6:0f:9a:64:ce:ae:64:15:e2:e7:17:bc:
         83:6e:e3:d8:88:d2:3e:a8:44:6d:e4:ea:a0:20:9e:0b:32:49:
         34:5d:2c:d4:7d:0b:64:70:45:c5:aa:ef:9a:75:db:39:52:e2:
         67:5e:ff:d4:b4:bf:37:93:70:62:e1:9a:92:c3:01:0d:4d:88:
         c2:92:92:b8:b1:0f:53:fa:6b:23:66:7c:5c:e8:81:89:84:5e:
         ea:b3:7b:64:d0:6a:ee:d8:35:f1:aa:a5:2e:db:2c:f5:ae:09:
         f1:b6:c8:e6:98:74:ae:6c:a4:0d:7f:6c:f5:7d:2c:29:28:7a:
         ab:f9:9a:bc:64:39:ac:39:9d:89:a1:d7:3c:60:c2:c8:fc:0a:
         90:81:f0:b9:83:ff:33:64:16:b5:b1:f3:72:a9:3c:f1:2f:12:
         cb:df:43:2a:54:b4:c3:e7:af:1a:88:4c:f5:9c:46:6c:fa:e4:
         4c:4b:c9:cc:b1:fd:c3:9f:61:e2:37:f8:ce:68:e0:9b:df:94:
         b0:0a:31:8d:ac:41:e4:87:1e:bc:c8:a3:e4:48:64:bf:08:ae:
         fa:f3:15:c6:c7:d8:4b:5c:67:47:61:0d:f3:0a:81:69:77:48:
         1a:9e:a6:c7:a2:e2:cb:55:29:a7:7f:6c:25:32:40:8d:1b:6a:
         9b:78:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:56:40 2024 by rpki-client on console-fra.rpki-client.org