Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e6960a-1fb3-3915-9c7f-72995ce04ab1.roa
File:                     93e6960a-1fb3-3915-9c7f-72995ce04ab1.roa (raw, json)
Hash identifier:          9BIG9wKJcyX1wjcA+3u7+6/ee3dMhs3TsolXcYdqhbU=
Subject key identifier:   88:82:A5:D2:25:04:E5:7A:D1:5C:D8:A3:E8:BE:DE:6D:D5:EC:17:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC920AB04027ED2659D4470
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e6960a-1fb3-3915-9c7f-72995ce04ab1.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     3371
IP address blocks:        199.202.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:20:ab:04:02:7e:d2:65:9d:44:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=617b0ba5-a7ff-40c4-87c0-05671604ca68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:51:39:23:6a:b5:e9:77:d1:b3:fa:a5:09:
                    7c:0c:ed:aa:82:75:60:43:0f:1d:33:86:34:14:ea:
                    69:e4:99:04:bd:91:d0:24:67:73:27:14:56:9e:0c:
                    5a:15:98:b7:09:eb:d4:e9:01:8e:33:77:00:87:a8:
                    76:37:3a:82:2e:a3:bf:5a:14:c3:d7:0d:e3:26:28:
                    e6:36:67:7e:6c:d7:77:29:3f:d7:66:3a:e9:56:4a:
                    60:cd:06:88:21:4b:3b:88:54:36:0d:69:4b:68:4d:
                    13:6e:11:af:b3:9c:ff:8d:2c:cc:1d:b4:6b:7e:d4:
                    f6:07:7c:c9:6e:de:44:8f:47:32:46:82:1a:ab:17:
                    16:c9:bd:06:13:ab:54:37:a6:5b:69:d9:b3:8b:52:
                    c6:5f:3d:53:e3:25:48:49:ad:23:10:53:f8:8c:d6:
                    84:e1:71:91:6e:83:8b:5a:b5:38:12:0f:e2:6a:8c:
                    71:58:79:57:96:fb:56:ef:6a:92:bb:98:13:b4:7a:
                    dc:a7:d5:77:4a:50:17:95:49:b9:e6:be:6c:4e:fb:
                    fd:d9:53:0b:6f:06:64:d0:45:d6:19:ae:83:fc:8a:
                    dd:57:5e:5b:b8:e5:f6:8a:2b:c1:9b:ef:ea:bc:ca:
                    61:60:d4:67:fa:26:7e:47:5e:6d:e8:24:37:e5:09:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:A5:D2:25:04:E5:7A:D1:5C:D8:A3:E8:BE:DE:6D:D5:EC:17:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e6960a-1fb3-3915-9c7f-72995ce04ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a0:42:e0:bf:9c:d8:6d:ac:ed:85:cd:06:f0:04:a3:89:5e:
         59:fc:ba:c4:1f:f6:68:aa:a7:9a:ff:03:cc:29:94:1a:99:b7:
         60:26:0e:8a:9f:1b:eb:1b:fa:e8:33:17:78:0e:f6:7b:be:36:
         f9:4d:44:a2:fd:69:fb:fa:b7:41:4a:48:0e:27:ca:70:3d:53:
         ac:95:fc:90:1f:60:32:78:4b:af:8d:ea:3b:a8:d6:56:8a:d0:
         ac:6b:7f:ba:0b:d7:6e:5a:f1:40:52:fe:83:67:17:ac:36:b0:
         d9:42:0b:49:9f:0c:e9:c9:39:7a:04:85:70:4e:8d:de:df:4d:
         50:63:a5:ec:c2:bf:e2:e5:97:53:09:19:0e:36:ed:0a:df:5e:
         97:5a:a2:91:10:38:47:fc:35:cc:bd:13:b4:54:65:1c:9d:12:
         e7:e8:5d:cc:71:ae:e5:90:01:d6:13:76:94:fd:d6:f1:4b:40:
         aa:13:0a:4b:01:6b:dd:f0:10:c3:59:82:33:ff:da:d7:7d:fc:
         84:ee:0f:d1:fa:29:39:cc:88:79:84:d1:1e:60:eb:13:58:24:
         a1:fb:68:99:d0:5e:33:72:6f:23:d1:03:b0:d8:7c:00:c2:04:
         f3:0f:06:48:8a:0f:32:d1:9a:f1:86:f2:b2:6c:f5:78:d0:c9:
         a0:11:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:33 2024 by rpki-client on console-ams.rpki-client.org