Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
File:                     7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa (raw, json)
Hash identifier:          jHY0WmESKMLqfTFiA5JgTknahp36VHLTd70sd20sKdE=
Subject key identifier:   3D:2F:46:5D:3A:D0:F9:29:38:E7:A7:26:97:1F:8C:8F:BF:10:DC:04
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F43285845E45E7C468DABABD6B87D5780
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     30153
IP address blocks:        209.50.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7c:46:8d:ab:ab:d6:b8:7d:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=3640ffa9-2f8a-4516-ba84-d4e3dc2612a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:5a:31:3d:e1:7f:11:00:78:44:d9:0c:fb:
                    d8:8c:42:66:ac:74:45:d9:3c:ba:b5:00:c9:72:3a:
                    f8:8d:81:78:a7:72:86:02:68:af:1e:8d:86:af:6b:
                    1d:9b:30:cf:61:e0:1a:45:9e:d8:5b:55:bf:3e:a5:
                    f8:1a:f8:7a:6f:d5:d4:16:43:de:ad:e8:2b:17:ac:
                    c2:4a:8a:cb:7e:ab:a2:14:a7:4b:b1:79:47:e7:73:
                    41:df:c2:4d:b9:24:d3:d9:ae:e6:6f:d6:a1:03:cf:
                    76:bd:7d:cf:b3:c5:98:7c:96:98:00:a1:a9:fb:ec:
                    73:d4:3e:cc:75:77:ab:f9:33:62:56:3b:1d:a6:84:
                    80:d3:05:a3:c8:d3:27:0e:d6:88:ad:ef:0c:b6:0a:
                    6b:70:ed:8e:ad:03:b6:74:4b:4c:80:e0:b4:98:35:
                    dd:7f:71:36:97:4e:48:2e:c2:e9:63:f9:00:6e:22:
                    86:60:50:6a:a7:2d:db:79:e6:93:aa:9d:fd:ec:28:
                    5f:e6:f2:54:06:c9:3b:5f:39:14:c0:77:69:a8:ed:
                    0d:ae:4f:a3:c7:c4:c1:eb:2a:2c:4c:7b:a5:bb:e5:
                    23:6b:ef:0c:a6:62:6c:b3:fc:b3:d8:40:60:65:83:
                    bf:4e:b0:ba:8a:2a:fc:77:de:e9:69:6b:3a:d0:46:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:46:5D:3A:D0:F9:29:38:E7:A7:26:97:1F:8C:8F:BF:10:DC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:2c:1a:87:27:f2:cc:c0:fe:18:2b:b6:26:e4:37:7b:a6:
         c0:65:b4:d8:fe:85:66:f5:b8:3d:81:bd:3c:e9:d4:76:52:8b:
         97:45:2a:0a:c5:26:ed:e7:02:0a:dc:86:a6:53:bf:6c:3a:78:
         f6:89:e8:98:07:e0:04:25:90:e9:31:94:8f:36:d7:60:51:e5:
         10:53:8d:21:a4:13:e6:9f:a7:e4:af:a1:12:35:5d:04:e7:95:
         e7:3a:6a:bb:a5:17:f7:1d:43:f8:76:fa:9e:35:37:54:98:f8:
         be:70:c5:4c:d9:fb:97:3f:f8:97:d1:ef:7a:41:8e:73:3a:d9:
         36:4b:78:84:f5:1e:92:4c:61:c9:48:d9:7e:1b:49:c4:70:a0:
         bd:84:eb:73:e1:da:07:70:03:b0:b9:a3:b2:13:66:43:b7:e7:
         23:a8:ce:a7:69:11:a2:cb:bb:ab:90:c4:ca:b7:6e:76:f5:4a:
         f3:c4:12:b2:af:ad:b6:1f:48:62:e9:13:4a:1e:17:c9:e3:b8:
         c0:2f:c0:b3:28:85:09:79:d1:aa:5c:7d:25:a1:27:9c:2f:3f:
         e2:0d:03:68:80:29:e1:a3:5b:bb:d2:5a:c5:3d:4e:fd:f9:04:
         71:97:70:82:59:d0:29:3f:15:97:9d:38:cf:5d:01:63:bb:6b:
         17:d2:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:58:36 2024 by rpki-client on console-fra.rpki-client.org