Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
File:                     9ca52f4c-c003-3bfb-b996-868e3106071f.roa (raw, json)
Hash identifier:          R+bymkBYo2bTcs1oolMnWkK9C2M/hIi9lnxFdSvVsso=
Subject key identifier:   0D:57:7F:6C:27:A7:D2:93:CB:D9:95:D1:8A:DF:CE:51:77:39:01:3C
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285845BD48DA385D0E0909F9D5C600
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        207.2.119.0/24 maxlen: 24
                          207.2.118.0/24 maxlen: 24
                          207.2.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:da:38:5d:0e:09:09:f9:d5:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=178e41be-3a68-4571-8f65-445d4ef53d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:21:74:be:1f:11:02:99:cb:3f:42:90:a0:
                    fc:ac:55:b1:89:e8:ed:f4:40:20:76:e7:32:40:59:
                    3b:82:94:d3:6d:59:1c:c4:b1:8e:72:3f:6f:16:eb:
                    e3:40:9b:8d:b7:11:97:fe:cb:55:4b:55:37:d6:8b:
                    53:d9:fd:ab:65:61:79:3c:b9:ca:c1:ac:21:7a:4c:
                    af:7a:0f:19:d0:07:e7:54:31:12:b1:4c:38:d6:21:
                    1f:f4:92:34:4b:3c:0a:fb:51:20:91:b5:90:ac:7a:
                    19:43:c3:15:30:7e:bb:fc:d0:0a:95:ba:96:9c:d3:
                    2f:8b:64:db:17:3a:e4:a0:a3:06:b2:bd:5c:1d:a2:
                    8d:f4:28:98:ec:d3:ea:25:8d:16:92:e9:c4:92:bc:
                    67:97:1f:4f:68:02:ae:3f:3e:a7:25:af:d6:80:24:
                    63:7a:89:b8:6f:0c:10:e4:56:54:e1:1c:33:bd:f9:
                    32:4e:dc:0f:29:eb:2d:90:3d:18:ac:d3:29:c9:66:
                    ed:a9:c0:80:f1:5d:3f:93:5c:9a:0f:36:81:68:31:
                    28:e8:9a:21:1b:7b:07:8a:3e:c6:66:45:8f:31:d4:
                    f5:8a:a5:7f:60:a3:51:a6:49:ad:4e:93:42:8a:70:
                    2e:28:f8:90:78:32:6c:2a:19:55:72:5e:30:ea:11:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:7F:6C:27:A7:D2:93:CB:D9:95:D1:8A:DF:CE:51:77:39:01:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.117.0-207.2.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:61:74:75:05:13:2c:08:d0:ec:33:54:e1:48:a9:0c:58:c8:
         39:98:d4:ab:2f:23:54:59:31:60:b8:e3:34:29:35:29:7a:8d:
         79:c8:d2:57:f1:75:54:2e:1a:fd:03:28:dd:ae:46:dc:1d:1b:
         a2:f3:b7:a9:82:e2:26:70:93:d8:e8:2c:2e:d0:30:d7:c5:c6:
         97:19:a9:e2:79:ef:e4:93:8a:52:ea:fa:3d:db:6e:34:23:1e:
         da:24:fa:cd:27:2d:5a:0d:0a:7d:27:36:5a:44:55:35:14:14:
         33:2b:47:1e:27:6b:d3:02:97:b1:a6:a4:c0:8f:f8:25:da:93:
         6e:fe:f5:56:71:9f:45:de:41:f7:f8:be:a0:45:85:91:9a:c6:
         0d:f5:f9:52:8b:d4:10:d4:fd:8f:6b:14:96:be:b7:1f:32:8b:
         6e:97:89:5f:56:3b:f6:3e:7a:53:c6:1b:8f:cc:2e:44:d7:d1:
         79:e2:8e:de:57:7f:d6:4b:40:8d:4f:08:5f:ec:10:f6:a4:f8:
         70:ff:de:d8:e8:c4:3d:40:20:b6:89:d2:c8:ee:cd:7d:8f:fe:
         f9:fd:c1:0e:5c:02:9b:b9:2a:bc:cb:aa:0b:ef:08:37:f8:72:
         1d:7c:35:12:b0:40:3f:df:73:5c:3e:de:87:4e:5b:5d:e5:87:
         50:54:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:37 2024 by rpki-client on console-ams.rpki-client.org