Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
File:                     844b830e-af15-3bd9-a761-f5bf11f43e9d.roa (raw, json)
Hash identifier:          0GCix1rKdXYvsUJAI8kgwohLqbix/0GxseCCPtflnPw=
Subject key identifier:   4B:69:73:DC:CE:4E:AE:94:7D:55:BB:00:B5:F5:B7:3D:5A:4B:6F:42
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584574B31F6A0F18743F463DE6C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     18781
IP address blocks:        209.8.75.0/24 maxlen: 24
                          209.8.27.0/24 maxlen: 24
                          209.8.187.0/24 maxlen: 24
                          209.8.191.0/24 maxlen: 24
                          209.8.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1f:6a:0f:18:74:3f:46:3d:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=0181fa45-020e-46e4-9660-ff875dc1e4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:ef:0f:77:07:45:56:fd:52:aa:48:97:aa:
                    5d:29:e1:f4:70:6c:2a:e9:01:c4:d1:c3:ed:17:58:
                    e4:b1:57:fe:51:37:6a:16:f9:fd:58:e1:fd:35:98:
                    e6:07:4f:f1:93:10:f3:9a:4b:80:7f:e5:0f:cb:8a:
                    e1:61:4e:5b:7a:57:8e:5c:ee:16:89:c9:3c:3f:09:
                    f5:37:26:94:f8:c2:ec:65:f7:5c:47:69:0f:49:24:
                    e7:89:9d:14:35:5d:0a:e6:68:16:d0:fa:b1:ab:93:
                    f1:7c:bb:8a:95:c4:2e:47:07:12:41:cd:11:c5:7a:
                    f4:40:ef:bb:93:b4:47:79:26:95:e6:93:b9:09:aa:
                    c3:b9:26:66:11:3c:1d:e4:04:3f:b6:69:ac:53:56:
                    94:f0:65:88:cf:c2:f2:c9:63:64:51:8c:9e:8b:93:
                    1b:74:67:36:fa:da:aa:e6:ab:43:7d:ba:cf:b3:e3:
                    85:54:8e:6b:6f:6c:10:4d:98:b7:ab:9b:d3:3b:5c:
                    b2:ec:b3:65:ff:2a:b4:1a:23:00:63:a4:36:45:44:
                    8f:e2:f5:43:cd:ee:21:9f:13:68:30:81:19:4b:54:
                    db:f8:ad:3b:aa:bb:d1:cd:cb:67:c4:fb:64:43:4d:
                    f5:5c:bd:39:ab:a3:3d:7c:16:21:93:2d:6d:6f:e8:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:73:DC:CE:4E:AE:94:7D:55:BB:00:B5:F5:B7:3D:5A:4B:6F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.27.0/24
                  209.8.75.0-209.8.76.255
                  209.8.187.0/24
                  209.8.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:99:74:0f:5a:c6:a9:20:63:d7:f9:c9:2a:c8:7e:8c:58:e3:
         de:3a:27:a2:b9:b2:a1:ad:a7:d6:a5:96:83:94:7c:20:fb:2b:
         9a:50:85:2f:86:52:de:ca:eb:7e:09:6c:0c:41:aa:4b:e0:b2:
         0e:e3:52:5e:a0:d8:de:f9:d5:6d:f4:28:d1:06:9d:e5:6f:b0:
         ff:54:c3:d2:ed:3e:b4:89:bc:c2:eb:f9:0c:f8:d6:3b:df:b9:
         08:7a:bb:5c:ce:ab:26:92:92:dd:9e:9e:18:6c:be:b0:a3:ba:
         73:1b:81:e0:52:f6:5f:ed:5a:63:cb:e2:13:13:fd:ce:ff:23:
         61:53:69:9f:ed:d3:e3:99:7c:05:23:bc:0a:cc:94:03:f4:22:
         98:54:2f:b9:9f:b0:fa:5d:b0:c2:1c:d2:91:7e:77:be:6f:10:
         c7:56:d6:86:2f:9a:91:e6:0e:1a:db:6b:d9:49:29:c0:c5:17:
         28:99:53:57:03:4d:0f:2a:4e:0c:c2:7d:4c:30:61:2f:55:5a:
         ca:b0:9f:50:40:36:2c:04:5e:37:48:7b:90:9a:2a:a8:ba:a3:
         99:11:d9:f8:46:f5:e1:01:be:ad:ee:6f:02:95:7b:0a:9f:dc:
         15:81:66:f7:d4:cc:64:6a:f5:b4:13:fa:6f:d1:85:4f:af:50:
         8a:60:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:24:03 2024 by rpki-client on console-fra.rpki-client.org