Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c493752-ae53-3ea9-b743-8edef0563f2b.roa
File:                     4c493752-ae53-3ea9-b743-8edef0563f2b.roa (raw, json)
Hash identifier:          X/8oNjERpI+sTD8kHaxBCYT1KWogvU7GMjmM2Gbk5QI=
Subject key identifier:   23:94:BB:E3:A0:D1:B8:29:5D:88:37:58:C6:4F:1F:E5:4C:85:D0:65
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844FF9011705BA5D91F31CA0B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c493752-ae53-3ea9-b743-8edef0563f2b.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     200184
IP address blocks:        216.218.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:11:70:5b:a5:d9:1f:31:ca:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=02d5c5ea-a3a5-4403-bd9d-5f2e0a6a63a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:df:ac:9e:66:48:b2:97:58:21:b2:f2:e2:
                    27:20:ad:25:39:98:62:83:59:cf:14:d8:38:d3:fc:
                    db:68:97:7f:00:eb:2a:5b:b6:d9:c6:a2:7c:b3:2b:
                    3e:27:be:dc:5d:6a:03:4a:9c:e4:5f:64:66:b1:27:
                    d2:be:16:b5:c3:c0:56:57:a7:e2:61:95:b7:0e:57:
                    c2:a6:e1:b9:bf:66:68:03:02:98:34:ec:09:35:f0:
                    f5:ca:30:6c:58:23:2e:18:1a:db:cd:d4:b7:9e:4e:
                    7c:48:d0:8e:f8:24:f6:5e:1f:92:fd:28:90:13:cf:
                    ac:7f:8d:ca:06:0f:c9:7a:4b:e7:44:f2:73:2a:10:
                    75:8d:d0:a8:f6:ef:15:f3:08:e6:c1:1c:48:4e:71:
                    db:b3:49:87:31:b7:75:4c:26:9a:03:59:9b:1a:cd:
                    7a:b2:81:b2:ee:10:96:86:df:11:43:41:72:de:ef:
                    67:76:8b:d4:c4:f4:bf:90:72:24:e0:32:09:d6:66:
                    95:2d:56:ec:14:b0:74:5b:44:19:d5:63:8e:ce:3d:
                    0a:b5:af:0f:34:b2:44:ed:b1:29:16:f1:1a:95:cb:
                    24:6c:ce:8e:3a:0d:b1:43:16:cc:07:1f:cb:39:33:
                    03:64:aa:3f:53:69:44:2c:c2:8d:d2:b0:64:bc:c0:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:94:BB:E3:A0:D1:B8:29:5D:88:37:58:C6:4F:1F:E5:4C:85:D0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c493752-ae53-3ea9-b743-8edef0563f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:60:a0:1b:b3:b8:1c:0f:91:80:c4:f8:17:9f:ec:4e:ac:16:
         38:c9:21:00:a7:63:e4:bc:43:0d:1f:ec:99:84:03:23:64:29:
         d8:43:93:b5:bd:b7:e2:f5:df:2f:79:83:82:13:95:98:46:cc:
         06:23:e3:91:7b:c1:21:06:86:f7:c6:b2:de:83:54:6d:9a:e3:
         bc:cf:e9:2d:3e:33:b8:5d:fc:46:8d:b6:2f:3b:ca:56:3d:f6:
         cb:2f:7d:20:38:64:b4:4c:34:83:5d:b2:b4:86:55:ed:09:8e:
         4c:4c:c6:c7:ae:1e:e3:85:ce:f1:e0:27:96:3f:39:b6:64:9b:
         71:ad:69:aa:6e:7c:09:1c:38:dd:a0:8d:60:c2:74:cb:f8:66:
         7d:8d:e4:98:18:47:64:2a:8e:bb:9c:06:6e:7c:1e:2b:bb:a8:
         4e:21:0a:65:03:4d:d3:aa:f0:7d:91:92:6d:17:d1:c6:df:f4:
         a7:ac:52:fc:a8:65:de:a1:46:e2:72:55:2d:fe:1c:47:eb:9d:
         1e:bf:5d:11:e8:9a:d9:c7:fe:be:9e:75:cf:2a:80:41:9e:76:
         e7:b3:6b:91:cb:31:7f:8f:6c:e0:8e:56:05:b2:ee:e4:c5:11:
         33:11:ba:d4:37:6f:6d:4d:e1:5f:86:bb:0b:e8:71:e7:64:ce:
         7c:df:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:29 2024 by rpki-client on console-ams.rpki-client.org