Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa
File:                     e21aefd6-472c-3930-aa58-debd99be2072.roa (raw, json)
Hash identifier:          0ZosGpi+ozAXPsf2cc2HivNwHfqzJB9wLlr+4fLhKT0=
Subject key identifier:   45:70:17:75:B0:82:58:41:27:0F:BD:01:62:F3:73:18:75:97:23:18
Certificate issuer:       /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial:       010D0C9F43285845E7291C68FFC2346C13C9ECC0
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     395035
IP address blocks:        216.150.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:1c:68:ff:c2:34:6c:13:c9:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=df781f86-9e9c-49ac-ad62-506205b7db62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:05:20:32:f4:0f:39:ca:80:dd:65:a2:35:
                    a2:b2:fb:64:39:ae:21:6a:07:4b:bb:15:d7:16:33:
                    3c:fb:b2:77:37:34:ad:68:91:a7:6b:4b:bb:21:96:
                    21:be:55:89:f0:ea:25:46:5b:7c:1c:fd:44:02:16:
                    ff:e3:17:0c:53:33:f1:98:cb:4e:5f:44:18:bd:b7:
                    ed:98:8b:21:43:5a:44:3a:6a:af:85:9a:a0:da:fd:
                    e0:2e:2f:20:d4:89:9a:01:45:be:6c:d6:e0:fb:1d:
                    c3:72:3f:2b:1e:6b:77:30:56:18:6f:9b:10:0d:f5:
                    f5:f5:0e:3a:c9:d5:9b:d2:42:2e:96:e1:8e:f5:37:
                    75:05:8d:77:e8:e8:2b:58:4a:1a:71:dc:13:64:d8:
                    bb:72:a5:68:3b:7c:ee:e9:ca:a2:b5:a3:00:04:64:
                    60:7e:8e:f6:ab:04:15:7f:db:76:74:76:38:79:bb:
                    a8:8e:4f:cf:8e:72:bc:95:84:a2:1e:72:77:8b:6c:
                    31:1d:bc:ba:b4:a9:65:98:cc:0b:40:21:ce:f6:df:
                    77:79:de:53:bf:b7:09:ab:74:90:7c:b7:22:79:92:
                    d8:c4:1c:2c:e1:1c:e7:c2:b5:16:19:6b:27:c3:5d:
                    b1:c8:f3:c8:84:ad:9b:61:ea:a9:da:a9:23:18:1b:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:17:75:B0:82:58:41:27:0F:BD:01:62:F3:73:18:75:97:23:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl

            X509v3 Authority Key Identifier:
                keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:ea:f0:30:c2:4f:d4:89:90:f6:d1:99:3c:47:f3:9f:1a:
         9c:08:8b:0f:9d:48:77:92:15:3c:c9:66:fc:df:40:9a:38:0a:
         14:da:07:bb:3c:e8:90:4f:28:99:08:ec:88:42:ba:55:a1:51:
         2e:8a:e6:1c:40:28:09:55:95:f4:3a:6a:00:6b:18:78:3b:c2:
         8f:79:dc:56:54:c6:a7:07:c8:e3:98:fb:82:27:38:6a:3e:b6:
         fe:85:4f:aa:d9:47:01:9a:c6:36:a3:42:4f:59:69:08:32:8e:
         61:9b:29:92:cf:6e:59:f0:e0:1f:6e:9d:fe:7e:e9:1a:a7:83:
         a6:9f:4f:73:53:bb:6d:df:42:87:5f:4e:5c:46:10:9f:b2:2f:
         49:59:13:9c:36:77:37:2f:19:83:73:4e:e9:a2:7a:1a:85:2c:
         98:b0:f9:5d:ee:65:1b:da:6f:7e:82:c1:8d:a0:a7:8e:3c:ed:
         11:f7:39:03:8b:29:1e:93:04:b4:ea:7d:88:06:fc:b8:a7:25:
         e7:6c:f0:fa:67:96:0a:2e:08:c5:1c:ae:bb:fc:dd:58:a2:ef:
         25:9e:ab:70:5c:fa:f0:9e:55:45:57:1f:e8:74:29:a5:a2:65:
         9b:d4:fd:d2:1f:ac:b9:ec:68:cf:69:2b:4b:87:84:78:e4:39:
         2c:bb:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:42 2024 by rpki-client on console-ams.rpki-client.org