Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa
File:                     bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa (raw, json)
Hash identifier:          aE94Ib5SPLvc9YqJmZM4XzD3CF7zVZoEHf8PgYbh4FY=
Subject key identifier:   56:83:07:14:E5:DA:77:BF:46:98:43:F8:22:3E:62:2F:47:D7:DB:69
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285845174AD86A698CC6E054425BC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     31898
IP address blocks:        199.36.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:d8:6a:69:8c:c6:e0:54:42:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=bae1a78c-164a-4556-8c3d-eb54c23c9d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:ba:75:ab:f8:d2:12:af:69:0e:3b:a9:08:
                    6e:f4:f6:15:10:e2:cc:7b:da:95:2e:92:3c:de:ca:
                    d1:3e:38:cf:89:1e:88:84:05:a0:f4:37:6f:de:e5:
                    88:c5:73:53:a1:70:ed:d9:c4:72:18:ab:ec:5d:e2:
                    5a:0e:1c:a3:b0:4f:45:50:1f:95:bf:06:41:2b:d7:
                    6f:3b:d3:1e:b0:20:f6:0b:9f:98:6f:97:53:ba:2c:
                    e7:63:bb:b8:75:c4:b2:62:d8:38:b8:e4:78:f0:65:
                    11:cf:18:c2:81:4d:90:ba:3e:fd:46:65:1a:7c:e2:
                    9b:a7:ed:cc:dc:9e:59:a3:d9:b6:e0:c6:4a:c4:b4:
                    de:5d:1b:e6:6e:55:9e:20:04:25:f0:97:42:d4:cd:
                    ad:15:c6:8d:f5:b3:98:ef:fd:2a:8d:48:35:2c:8a:
                    fe:57:d5:0d:c5:54:16:a8:dc:8e:de:27:c6:40:4b:
                    86:3b:f9:65:54:82:6d:15:72:38:c1:2e:35:3b:37:
                    1c:98:a0:35:4c:f2:00:5b:9e:7a:17:c7:65:ba:00:
                    e3:70:9a:d6:39:72:bc:70:7c:2c:42:b6:38:0b:4c:
                    a7:14:27:74:96:c0:aa:d0:01:cd:db:5a:9a:c4:b0:
                    53:c8:fd:36:01:70:a0:e8:2f:01:15:71:bb:6d:80:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:07:14:E5:DA:77:BF:46:98:43:F8:22:3E:62:2F:47:D7:DB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:62:1e:12:86:26:16:17:72:2d:57:61:9c:21:57:8d:74:
         04:e4:b6:21:ca:42:05:75:63:75:9a:e1:54:ce:43:ea:77:04:
         0a:62:19:0a:e9:c5:fe:b1:4c:fd:65:a1:d3:24:c6:a3:a5:f7:
         dc:d8:d5:d3:ab:0e:cb:3b:46:be:d5:20:57:22:e0:f4:8d:a7:
         f6:90:e8:4d:e1:f6:b3:d8:e6:48:bd:92:23:0d:b5:07:77:e3:
         5b:7d:5b:a0:09:6c:41:c3:af:0a:86:50:2b:94:9a:f4:9d:ee:
         42:91:ae:3e:1b:1a:61:cd:0f:ea:34:52:0e:fc:9c:0a:97:14:
         b5:cc:82:2c:27:e5:23:25:dd:e6:54:c9:0c:c5:fc:d5:13:22:
         e3:8b:89:cb:c7:61:2c:d8:f9:d6:2d:13:16:fe:3e:b5:61:2f:
         0e:8f:33:c9:df:da:7a:47:d7:f6:a3:03:6d:09:d0:a4:e9:de:
         db:7e:d6:18:aa:62:85:d6:ac:58:50:3c:f8:b9:fb:a1:0d:a8:
         90:15:23:79:f4:36:aa:7d:1d:41:73:41:5a:57:be:7b:4d:a5:
         7f:87:a5:05:e0:c5:0b:65:4a:cf:fb:99:5f:3f:12:d9:c8:d4:
         ac:34:9c:59:75:96:85:15:7b:30:8f:86:fc:e7:b3:2c:a3:35:
         23:37:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org