Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa
File:                     80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json)
Hash identifier:          yg9LU1vi+VDg96I8IgayuM/oYwPkKdyf+/jOCyRHCcw=
Subject key identifier:   ED:E5:6F:FF:7D:6D:F9:1D:D6:0B:F3:5D:DA:D1:1C:51:59:6A:17:0D
Certificate issuer:       /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Certificate serial:       010D0C9F43285845A6F36BEEAE150D867B6D3C00
Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        208.71.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6b:ee:ae:15:0d:86:7b:6d:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=c5b767db-c2d2-4c7d-a4d0-64ca3e16aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:f5:9c:34:0c:99:cf:dd:ea:fe:59:01:9c:
                    54:f0:b7:fe:49:c2:c9:9d:9f:6b:e3:6c:98:0d:aa:
                    a1:f7:55:eb:cc:ca:a1:b2:76:f4:cb:37:6a:9a:83:
                    b4:ef:9d:cd:1b:46:ed:8a:8f:12:49:22:16:bf:94:
                    21:98:db:0f:da:6a:3f:36:ea:4b:75:40:3e:d9:2f:
                    25:b8:a4:88:2b:55:22:63:0c:8b:dc:ef:a5:43:35:
                    af:d6:7f:aa:e4:7b:57:91:78:b5:1c:2d:03:db:2e:
                    99:ee:51:4f:45:b9:73:b9:41:fe:c8:f5:8e:bb:5a:
                    00:df:b0:97:66:9c:a5:43:d9:36:1d:10:db:bd:21:
                    d4:0b:f1:e7:40:29:00:0e:78:71:2a:c1:85:c2:49:
                    c8:80:42:dd:72:c9:bb:25:64:8b:35:60:84:c8:d3:
                    8b:7b:78:ae:1f:c6:cb:63:d3:4a:c3:02:bc:f8:ee:
                    89:9f:5f:1f:05:cd:b1:65:d1:6b:3f:7a:79:b7:d4:
                    eb:9b:e5:83:8f:36:3f:de:4c:ee:79:b0:21:62:15:
                    be:66:86:ff:cb:df:b9:0c:6d:ad:f6:11:02:eb:74:
                    25:1d:8e:74:84:eb:8b:01:4f:28:b7:1c:30:e0:60:
                    db:1b:85:66:6b:43:93:86:8d:78:43:6f:96:3c:12:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E5:6F:FF:7D:6D:F9:1D:D6:0B:F3:5D:DA:D1:1C:51:59:6A:17:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl

            X509v3 Authority Key Identifier:
                keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a9:b2:ca:2f:29:64:bb:da:3a:3a:73:80:53:bd:6d:21:a6:
         40:db:3e:fb:32:81:e4:45:3e:82:7e:b0:f4:23:6e:7c:f4:4e:
         ac:9a:f7:e3:9f:9c:46:8a:02:23:cc:66:61:d8:dd:fd:a0:f9:
         cd:cb:90:dc:8d:35:f7:14:ae:34:e1:4d:a0:22:57:80:18:a9:
         00:41:79:cc:72:a4:4b:c1:62:ae:5b:97:d7:12:99:b7:3b:ff:
         5f:64:2b:84:41:03:8c:14:8f:28:5c:0e:c1:85:69:07:d7:45:
         93:c7:b1:e6:99:ec:b5:58:28:f6:87:c6:c2:d9:04:d0:6a:69:
         f5:15:1f:96:6f:38:2a:12:63:ce:9b:dd:99:f3:8a:0b:95:41:
         be:33:18:e1:84:91:e8:ee:8b:21:7a:f3:5e:6d:8d:96:9c:08:
         04:45:a1:54:2d:c6:10:22:67:28:cc:21:3d:92:73:93:d1:09:
         d3:0d:cd:ac:18:d0:ee:2e:35:05:4c:0d:85:b3:54:1b:76:45:
         24:cb:d5:bc:f4:20:53:eb:f7:7c:8c:21:c7:6a:42:8c:20:f0:
         f3:c8:b7:8a:e7:f9:9d:aa:8c:b2:d8:f5:bf:07:f1:3a:0c:79:
         15:97:3d:76:d4:0a:60:09:c1:89:4c:66:0b:3b:35:69:2a:55:
         24:df:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:59 2024 by rpki-client on console-fra.rpki-client.org