Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e81a6de4-67a0-31a5-a7f8-6fce7bedd644.roa
File:                     e81a6de4-67a0-31a5-a7f8-6fce7bedd644.roa (raw, json)
Hash identifier:          iU+gEANGy19Z1XSRhQixNcld7V8C+wSFZHxLkQ+3+5Y=
Subject key identifier:   1A:D2:92:57:09:77:27:56:44:A4:6D:AF:3B:CF:C1:73:31:9E:E7:C1
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F43285845CB3E55C7C74E95EC77064F00
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e81a6de4-67a0-31a5-a7f8-6fce7bedd644.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     52347
IP address blocks:        192.34.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:55:c7:c7:4e:95:ec:77:06:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=498848b6-f5ac-4ff2-8425-ed9ddbc5f015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:c4:a2:82:38:6f:94:e3:31:fc:55:f7:c4:
                    c3:9f:6c:ff:86:aa:e8:94:e0:e6:d8:20:0d:3b:1c:
                    63:89:e2:ee:1b:61:70:2c:67:ac:2f:f3:fc:92:92:
                    77:c1:0e:df:45:19:71:ea:f9:b8:17:e6:ed:d3:13:
                    a9:23:18:66:e1:aa:c8:1d:8a:58:13:8c:d6:26:3b:
                    90:00:36:11:c3:c2:fb:f6:a0:0b:1d:5c:e7:12:12:
                    a0:10:1d:0a:cd:6d:50:c4:e9:68:22:4f:26:ee:4c:
                    b4:db:ce:65:46:f5:a5:f6:c5:05:62:81:78:bf:73:
                    3d:84:e1:29:b4:18:d2:17:d2:ff:7e:25:51:0a:d1:
                    d2:9a:ee:a0:19:5f:9f:45:08:fe:a9:04:9d:67:9f:
                    46:66:da:9f:17:26:7a:79:76:41:79:51:a4:f5:f1:
                    47:81:ef:12:9a:fd:b1:ed:13:6c:69:b6:4a:2a:26:
                    20:cf:db:3f:dc:ab:55:e9:c9:8b:ac:13:d3:bc:cf:
                    42:5c:9a:fb:99:52:13:01:bd:38:03:c9:09:cb:9c:
                    88:2c:33:54:7f:6c:64:02:d8:7e:ef:70:7f:da:70:
                    b5:e2:bc:06:88:8b:32:f5:a0:78:59:ca:38:f2:49:
                    a2:a6:35:99:5d:03:07:02:7e:1c:51:e6:bc:68:29:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D2:92:57:09:77:27:56:44:A4:6D:AF:3B:CF:C1:73:31:9E:E7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e81a6de4-67a0-31a5-a7f8-6fce7bedd644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:b0:19:c2:ae:63:f0:eb:1b:c6:7b:33:9e:e1:7f:27:cb:
         41:77:90:8e:b8:c5:59:2d:b4:cd:4f:a4:e7:e9:5f:b3:0c:af:
         1c:73:b7:6f:a6:c0:68:13:bd:61:a0:1a:dc:09:64:c0:d8:7d:
         cf:d0:b2:14:e5:d7:f2:56:33:8e:79:ef:0c:13:85:d4:8b:4a:
         30:ed:7d:08:b1:49:25:66:6c:60:e3:e1:b3:44:ed:b9:c4:d5:
         75:5e:8a:d8:62:cb:53:15:c7:b5:d4:0a:44:de:0f:59:fd:cc:
         f2:f4:98:2d:3f:b6:08:ee:75:d6:62:94:78:f1:85:a2:83:cb:
         64:11:c6:81:ff:fd:5a:5d:fa:a7:0d:07:91:6b:ad:db:0a:24:
         0e:d8:eb:5b:62:50:5b:18:f4:b1:4e:1d:d5:dc:b8:43:d2:95:
         a2:0f:f7:61:f8:c4:7f:28:09:bc:27:c9:13:45:55:af:c9:6a:
         e7:cf:57:c1:99:c6:05:c9:e2:69:fb:a9:cc:9e:76:a7:c9:03:
         32:14:4a:86:c8:3f:a6:17:42:62:a4:ec:f7:58:67:6a:d5:80:
         f1:ca:75:26:c2:34:44:59:57:67:a2:8a:be:70:79:e3:86:1f:
         dd:5f:db:75:7c:06:84:c6:f0:d8:f3:24:f8:9a:82:f4:71:ff:
         85:c9:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:50:37 2024 by rpki-client on console-ams.rpki-client.org