Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa
File:                     b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa (raw, json)
Hash identifier:          p8mz2NCdwzmJbXa/vW/7GmGF3lLFrHUa63AgekgUQjw=
Subject key identifier:   0F:1B:BF:75:18:0B:1E:C3:81:79:95:25:1E:D7:49:28:2D:08:DC:5D
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F43285847C4AA1B83F90B0C424A3E9A80
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     25617
IP address blocks:        216.222.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1b:83:f9:0b:0c:42:4a:3e:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=37386d2d-99ac-490a-b246-015b821f76ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:13:0b:1c:15:ff:3c:3e:84:60:13:0a:88:
                    1e:35:13:6c:ef:09:e2:2f:11:52:3e:72:47:ee:e9:
                    e8:8e:f6:35:88:97:f9:c5:87:78:00:e3:76:3b:cb:
                    cc:d1:35:75:39:39:05:25:7d:e0:b5:b4:29:2b:9f:
                    a8:30:d2:2a:8d:1e:bc:bd:2a:fc:41:49:25:1e:74:
                    0b:21:be:f3:37:b8:09:7a:d1:40:7a:e9:a2:f2:ab:
                    51:88:d6:88:e4:a5:00:a2:48:c1:3f:7e:e7:bc:8b:
                    64:a7:77:05:85:65:1a:88:bc:36:8e:fb:31:68:75:
                    55:37:6b:2f:80:60:db:06:df:23:6f:2d:a2:33:8d:
                    54:93:9a:d5:65:be:2e:81:75:f6:a6:19:3b:95:44:
                    5f:5f:59:14:7c:43:75:b1:c1:88:6f:ee:c7:fb:eb:
                    dd:9f:3b:ee:8f:ca:83:27:cf:bf:6e:1c:c0:fd:1f:
                    03:49:f8:7d:f2:e0:66:39:9d:20:db:ba:8d:75:25:
                    d4:fe:d2:89:55:7c:73:25:2f:1f:09:36:ed:68:b3:
                    2e:be:1d:fb:f1:0d:d2:f5:89:ae:ae:43:bd:01:95:
                    38:e3:39:cc:bb:6e:ad:d1:2c:f7:8d:9a:6c:15:d8:
                    04:37:89:05:8d:1c:0e:e7:08:26:d1:1a:aa:3c:1d:
                    ec:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:BF:75:18:0B:1E:C3:81:79:95:25:1E:D7:49:28:2D:08:DC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:78:42:ad:de:be:26:9f:84:aa:c7:87:be:64:62:9f:ac:
         44:3d:7c:00:00:ad:fd:62:44:f6:59:d2:ea:d7:63:a8:9a:34:
         da:47:d0:0e:de:03:26:97:9f:7a:d0:84:a8:5e:e9:bc:da:11:
         b0:ef:9f:a4:fe:2f:84:62:b4:c2:3d:f0:03:9e:66:05:0e:bb:
         76:8a:6e:42:d5:16:c4:38:79:8b:7e:f9:2e:a1:10:36:b3:34:
         eb:ba:21:2d:ae:4b:98:ee:85:4f:7e:42:ec:71:5c:b9:3f:b9:
         ef:20:2c:8a:ff:48:fb:8e:aa:cb:48:93:ea:82:49:b4:eb:43:
         1a:6c:38:a6:2e:3d:75:d5:8a:77:a6:e6:14:b6:6d:2f:a0:5d:
         67:05:0b:bf:71:87:0b:f0:a8:f5:82:71:de:a6:05:4d:5c:5d:
         1a:1c:ee:bb:79:59:82:39:27:37:cd:36:50:06:e4:eb:31:c9:
         99:2a:bb:53:cb:dd:46:ec:08:f9:31:fc:f4:97:08:31:fe:e4:
         16:08:3f:cc:22:d6:35:18:c8:f5:a8:35:24:ba:a9:c2:a3:13:
         f0:ef:8a:7e:04:5f:a0:09:f1:fa:31:f3:23:1d:d6:9e:ac:09:
         6e:14:89:ad:d7:17:8f:51:05:ad:b1:97:3d:f9:62:f8:39:79:
         df:a6:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org