Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
File:                     79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa (raw, json)
Hash identifier:          PhjU/Ux1iL1ol754tPSkrKmLo3EGRpJkxgqU7U7Iy5Q=
Subject key identifier:   E9:33:72:60:37:87:F5:D7:1A:6B:F3:1C:7B:68:26:E7:86:9B:9C:01
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584531B2990D205817AE90125900
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        216.185.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:99:0d:20:58:17:ae:90:12:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=7f23ef0b-98db-4340-aa56-78d7d585cf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:e9:29:67:9a:6e:7f:e2:8a:ce:54:3f:7a:
                    ca:85:af:d8:72:e2:28:3b:b6:3a:77:16:46:d4:48:
                    86:c3:2e:02:cb:f4:5b:79:d6:d3:c9:f3:ae:7c:98:
                    7c:b8:d2:8b:fa:ad:0b:5d:8e:29:4f:57:eb:72:02:
                    df:1c:57:62:9c:7c:0b:d6:d0:8a:13:85:b8:ec:a9:
                    d0:7a:96:3c:6c:9e:8a:8c:8e:4c:91:d7:da:4c:a3:
                    a4:cb:c2:77:a8:cf:89:b4:f2:32:fe:2c:78:02:fd:
                    77:ca:22:fe:d4:a1:90:17:ac:0a:72:1f:5e:2f:8c:
                    1c:bd:39:1d:b5:d3:fa:eb:a3:c2:4d:aa:64:8e:7a:
                    59:91:85:ac:53:8b:d5:fc:91:c3:75:80:a3:39:29:
                    09:57:8b:45:91:6c:82:90:07:13:70:2a:4c:6e:05:
                    67:14:66:3f:0f:2d:d6:62:ac:59:32:dc:65:aa:b0:
                    1a:00:d4:bb:7a:d9:e8:96:23:29:08:4d:2e:cc:4e:
                    a7:c2:6d:e0:43:c4:75:7b:89:04:6a:dd:ed:54:3e:
                    e1:6c:4d:b0:c5:9b:3e:33:ae:b4:14:da:52:30:73:
                    3e:bc:d5:80:af:a9:17:fc:e2:3e:a9:f7:5a:65:d1:
                    61:fa:91:c2:36:14:b2:c4:bd:72:f0:c2:a1:d4:26:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:72:60:37:87:F5:D7:1A:6B:F3:1C:7B:68:26:E7:86:9B:9C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c6:e0:5d:bf:e2:2d:96:ee:90:e6:ae:30:e1:a1:db:f4:ee:
         a8:30:8f:f0:35:56:61:8b:2a:34:8e:ad:7d:3d:73:45:9d:17:
         6c:8e:78:fa:c2:32:49:73:32:e6:4a:9c:04:3a:f1:ca:23:04:
         13:31:33:e5:8e:9d:fe:5b:0b:b3:49:2c:20:28:63:4f:df:72:
         9b:9a:d5:55:03:74:20:58:74:c7:e2:b6:3c:59:83:e3:b0:67:
         38:8c:ac:57:c7:27:6b:c2:57:3e:80:6f:f1:a3:7e:3e:c2:39:
         0e:ea:d7:ab:b5:4a:1d:0b:47:03:e8:56:e3:94:3d:05:21:74:
         60:15:1c:32:b4:21:a2:93:d4:28:37:6a:c4:7f:03:ff:c7:6c:
         fd:b6:6e:c6:2d:f9:73:b5:5b:bb:b9:bc:17:71:04:3e:00:d3:
         06:35:a3:34:5c:58:40:57:c4:23:b3:e1:37:73:1a:cc:e2:bd:
         bf:20:34:d2:31:9f:30:eb:ca:78:5e:dd:01:15:93:b9:40:b3:
         02:0a:b0:47:ed:ec:b5:e5:eb:08:64:b9:a4:54:b6:a7:eb:ae:
         af:27:f7:a5:2d:4b:35:ed:87:5d:e5:19:7a:25:12:30:1d:5f:
         ec:9c:1c:9f:b8:00:a7:7a:1d:21:e7:24:ab:41:60:fe:77:27:
         9a:03:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:52:17 2024 by rpki-client on console-ams.rpki-client.org