Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa
File:                     dbd2d048-07e5-3fee-ae9a-f5488717c295.roa (raw, json)
Hash identifier:          Xj3ELzm+RbD2dDxLUkJme3qlR/N6oHNjDMz1jRHiFDI=
Subject key identifier:   05:37:4B:0F:44:10:A0:A8:9C:FA:02:97:76:89:47:15:F3:FE:9F:F0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584540B84CC9C01EE2B097A706C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa
Signing time:             Mon 18 Mar 2024 22:09:09 +0000
ROA not before:           Mon 18 Mar 2024 22:09:09 +0000
ROA not after:            Sun 16 Jun 2024 22:09:09 +0000
asID:                     15169
IP address blocks:        108.177.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:4c:c9:c0:1e:e2:b0:97:a7:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 18 22:09:09 2024 GMT
            Not After : Jun 16 22:09:09 2024 GMT
        Subject: CN=317cc897-8c10-40c6-8c19-1f94a679b6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:5d:6f:ba:1f:b9:05:eb:8a:31:fc:91:30:
                    82:d7:56:b8:a6:0b:8c:df:06:aa:63:3a:9f:9b:14:
                    40:29:3b:a2:7b:87:45:75:89:8b:e9:c0:c5:0f:fc:
                    f5:a2:30:76:69:2c:77:ad:7f:22:ef:6f:8c:f6:12:
                    5c:9c:b1:fe:46:b5:16:29:c3:25:48:a4:7c:87:a6:
                    f0:35:18:7f:fe:36:84:2d:6a:9b:99:76:84:18:7c:
                    7e:6a:03:48:63:36:88:9d:87:70:c6:56:fd:36:60:
                    6b:a9:ac:5f:55:78:97:fa:cc:9a:21:cd:cd:07:f2:
                    08:48:16:9a:47:6c:71:74:43:ca:e5:3d:f9:59:02:
                    5f:0f:20:34:12:7d:ae:8d:7c:39:10:64:8d:f7:48:
                    a9:9e:00:a1:e7:fe:31:8b:5f:87:f4:87:6e:ce:b8:
                    b4:13:8b:88:eb:ad:a7:37:fa:70:5c:c7:56:53:29:
                    6c:c7:bc:c6:0c:0d:23:9e:0e:bc:c4:f6:37:4c:a0:
                    c0:9a:a3:35:e9:79:62:73:79:b1:f4:ca:9d:0a:0b:
                    bd:97:a4:30:fc:7a:da:8d:94:4b:72:17:f6:91:23:
                    a8:01:0d:89:9b:ac:2f:33:84:67:00:98:c3:bd:71:
                    43:b6:c1:26:75:d7:27:52:74:93:91:30:f7:d0:a8:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:4B:0F:44:10:A0:A8:9C:FA:02:97:76:89:47:15:F3:FE:9F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:2b:a1:86:55:c8:54:f5:b3:5b:11:21:e1:70:94:6d:8a:
         f9:78:51:2c:f1:6a:68:16:55:26:11:05:f9:da:9d:6a:2c:27:
         b2:36:f5:3f:51:e3:2a:6f:67:5b:53:c4:8d:b5:14:30:62:13:
         5d:b7:e2:ad:39:36:96:33:0f:86:e6:36:d6:e9:b3:e9:77:7d:
         db:f1:a7:e0:fd:49:4f:6d:17:ff:33:b0:9a:33:66:c3:0c:bc:
         00:5e:3e:3b:05:fc:98:d4:eb:7c:78:cd:9d:29:f7:4f:ff:c4:
         2f:df:5c:e0:90:0f:b3:a7:0c:ad:f0:af:ac:e0:e1:32:bf:65:
         e0:ea:be:8c:dd:e8:42:8b:3f:b2:81:b6:1a:8f:6f:cf:81:65:
         5c:7d:bc:5d:f0:cd:a9:f4:5f:3d:49:cd:e5:4b:f8:2b:39:68:
         6f:03:26:cd:38:06:29:ff:2c:52:48:e0:80:a9:b6:37:ef:47:
         ff:1f:95:02:01:bb:01:a9:13:64:f6:de:9d:86:ee:ec:5b:bd:
         03:a3:7a:ff:d5:b6:df:25:ad:97:24:00:b2:28:8c:6f:9a:69:
         6b:8d:f0:52:fd:58:b5:17:3c:48:ba:1a:80:d1:a5:5d:4b:ec:
         89:d0:74:8a:3a:0c:ad:c6:8f:aa:2f:31:6f:37:e5:05:2d:60:
         cc:5e:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:51:21 2024 by rpki-client on console-fra.rpki-client.org