Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa
File:                     95e7c803-11e5-34eb-84fa-379ee98b58d3.roa (raw, json)
Hash identifier:          cMPatIqjlOsm39H4AERcCNZWxGHhaYmBq+h+FBI0Usk=
Subject key identifier:   C6:2D:AE:6E:B1:F1:D1:FA:F1:C7:8D:26:A4:79:4E:1F:53:36:9D:26
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F432858457D131DD87E44AD3F5A8AA2E0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        208.71.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1d:d8:7e:44:ad:3f:5a:8a:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=8fb39279-0e5f-47a8-9756-2b79843ceb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:3a:4e:d2:77:ac:df:6e:64:c2:bc:85:9d:
                    73:b5:b0:95:69:59:8d:d6:21:2c:ca:55:92:03:56:
                    85:92:f9:b9:7d:f3:69:ad:ec:3b:82:11:74:0c:08:
                    bd:42:59:08:0f:04:40:f6:a4:2d:00:1b:b8:21:52:
                    62:01:c4:e4:c9:fc:fe:ff:d1:e0:72:d9:aa:f3:01:
                    a0:27:06:25:b5:11:de:8e:d4:1a:03:9f:52:2f:97:
                    66:33:2a:6e:0e:d6:70:15:c2:07:e1:48:3f:a5:db:
                    85:74:84:23:76:67:55:eb:9d:d0:cd:92:57:4a:85:
                    72:bf:29:1b:f8:53:e1:d5:28:7b:5d:dd:62:cd:f7:
                    59:0e:b3:d1:e3:96:06:c6:29:d0:8d:31:02:48:ac:
                    1f:f2:cd:ba:26:44:2b:82:da:86:20:40:8f:61:a9:
                    b2:af:aa:b7:9f:a5:52:5b:06:8c:cf:69:b5:58:3d:
                    e0:81:f5:ba:00:54:95:08:d8:36:01:6c:64:32:a7:
                    3d:34:f9:5e:e8:b4:35:2d:28:b9:0e:1a:65:18:fb:
                    ec:79:a7:cc:c6:d4:8e:66:e2:c6:52:1f:a3:90:42:
                    e9:46:5c:d6:29:f8:81:9c:70:97:27:21:01:73:ec:
                    21:8a:d8:dd:fd:7b:77:6e:bb:35:39:8a:42:e8:34:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:AE:6E:B1:F1:D1:FA:F1:C7:8D:26:A4:79:4E:1F:53:36:9D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/95e7c803-11e5-34eb-84fa-379ee98b58d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:26:14:a4:40:fd:c1:e6:de:25:9c:8f:16:da:6d:1f:57:
         4e:9f:3a:1c:8b:94:0f:82:72:16:73:cf:a5:75:21:61:b7:fd:
         0d:50:b0:2c:87:d5:22:40:e2:b4:7e:b5:00:f4:ca:7b:c8:87:
         12:92:b1:71:8a:ef:c9:2b:a3:06:ab:00:86:68:d5:b7:40:7d:
         6f:6c:dd:5a:a0:fc:a7:0e:0b:3a:5f:95:8d:77:f9:03:93:27:
         73:f8:69:61:bd:de:d6:21:62:a2:3f:29:a3:f5:d0:e8:d3:9b:
         0a:23:a7:91:28:de:5c:f6:40:f6:95:18:6a:e6:12:fc:7f:09:
         50:6d:b4:29:f8:57:ce:77:19:e3:22:6a:5e:40:aa:fd:6d:c4:
         20:44:7a:a0:91:07:dd:c3:f5:89:e1:6c:51:a2:1c:a9:1b:c5:
         64:b9:82:a9:a1:44:22:23:96:d3:e7:db:ab:a4:32:88:c5:b2:
         1e:ba:76:b0:60:ff:61:1a:52:c4:81:0f:79:7b:76:0b:b6:31:
         fc:92:8f:62:6b:38:e1:92:f1:24:74:fd:9c:fa:b2:a1:04:4f:
         6d:44:84:17:4c:45:b9:79:cc:26:c1:aa:39:16:db:4d:bf:6e:
         6e:8c:ba:3e:8a:ff:cc:2c:69:d7:1d:1a:18:43:d6:25:ef:90:
         f4:e6:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:52 2024 by rpki-client on console-fra.rpki-client.org