Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/6447f07c-d9cb-37c9-ba5d-564de83d8314.roa
File:                     6447f07c-d9cb-37c9-ba5d-564de83d8314.roa (raw, json)
Hash identifier:          wpdX4jacey36JhLPNHGhJSTh8ZSO/2yvblsQA2in1FQ=
Subject key identifier:   4D:DF:95:B6:D6:D4:B0:C9:C2:5F:2B:91:EA:42:27:7F:B5:33:52:94
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F4328584524EBCA7C3721E727CD424BE0
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/6447f07c-d9cb-37c9-ba5d-564de83d8314.roa
Signing time:             Fri 08 Mar 2024 23:10:16 +0000
ROA not before:           Fri 08 Mar 2024 23:10:16 +0000
ROA not after:            Thu 06 Jun 2024 22:10:16 +0000
asID:                     16509
IP address blocks:        198.147.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:eb:ca:7c:37:21:e7:27:cd:42:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: Mar  8 23:10:16 2024 GMT
            Not After : Jun  6 22:10:16 2024 GMT
        Subject: CN=f359b4d7-57c7-4556-bc13-23eb504e2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:80:59:bb:09:65:6d:05:ad:1a:d4:ee:a2:
                    71:54:fc:8b:e0:f9:e5:29:2c:5c:1e:d0:ba:ab:21:
                    62:f5:79:7f:ff:6f:f1:bd:66:79:e1:04:41:9e:dd:
                    04:34:e9:ec:70:eb:2d:f0:86:38:3c:89:ec:ea:f7:
                    a4:3d:89:85:17:55:67:dc:74:73:fd:53:25:8e:87:
                    5f:60:ee:da:6d:15:88:07:8a:81:9c:e2:01:24:4d:
                    cd:ea:3e:fe:30:4f:47:df:6a:18:25:26:f6:f9:dd:
                    c0:1b:e0:73:bc:11:5f:d1:72:6d:c5:37:f2:b4:c9:
                    c4:89:7e:a8:17:27:9f:e3:1b:73:e4:c3:c9:fc:c4:
                    eb:ce:66:04:a1:be:a0:fa:ef:fd:d0:27:08:a4:f2:
                    2e:b6:34:99:c9:fc:b7:50:62:dd:49:2e:e7:cf:b8:
                    71:ff:70:97:a6:96:5a:5c:b0:1c:fe:cd:4a:39:79:
                    af:9a:ce:95:55:00:01:01:b1:4b:b7:02:c6:89:97:
                    ab:9b:7a:08:5d:6b:8f:c2:3e:29:35:af:4b:12:e5:
                    bb:91:b0:a0:31:12:33:03:62:f1:fa:af:72:bc:21:
                    35:61:bd:40:19:5d:16:04:bb:eb:7d:56:88:1d:c6:
                    ac:63:ac:4e:e8:67:40:5e:fa:00:7a:46:42:7f:b5:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:95:B6:D6:D4:B0:C9:C2:5F:2B:91:EA:42:27:7F:B5:33:52:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/6447f07c-d9cb-37c9-ba5d-564de83d8314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.147.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:61:02:a6:eb:d4:39:58:57:11:a4:06:d6:75:6f:99:ca:0a:
         9f:53:1c:61:44:24:62:6a:ea:01:d8:de:72:17:4f:da:e8:87:
         9e:aa:33:70:a7:24:3d:28:91:73:89:e4:51:e5:86:bb:6c:a6:
         e3:98:7c:e3:91:40:96:37:e8:d6:b4:f0:a1:67:60:0b:e6:4d:
         aa:12:0b:db:88:9d:e3:02:41:55:26:41:f5:d1:de:8a:1c:74:
         3e:9e:f3:e5:62:53:82:b3:a3:01:8b:ac:69:3d:82:ff:d3:36:
         8c:dd:ad:05:ac:70:fc:34:a5:28:f7:c2:92:83:38:ec:4f:8b:
         8a:98:55:3d:3c:01:94:d7:0e:dc:25:bb:c9:63:f0:ea:64:1f:
         48:cd:a5:5c:b5:b9:a9:15:52:74:67:e5:38:f7:54:70:72:38:
         e6:a8:bc:98:78:64:ee:89:a9:89:6f:40:47:da:4c:10:6a:e6:
         6c:cc:1e:d6:a1:08:91:42:c5:2d:c0:96:4b:27:e8:91:5a:8c:
         f6:e6:6b:f6:9b:2f:b9:f9:c0:d5:5e:40:f9:0a:e3:7e:13:ba:
         24:6c:66:64:11:09:c1:01:ef:98:a6:2f:35:97:76:08:ac:1f:
         2b:0d:89:69:ae:8c:03:86:98:58:bb:db:73:82:e5:15:48:12:
         d9:58:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:00 2024 by rpki-client on console-ams.rpki-client.org