Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
File:                     7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa (raw, json)
Hash identifier:          ktEW1Onuoloo5vXGdP56LUM7ALP+Yb/ltRyJfJ27x3M=
Subject key identifier:   5E:09:58:E7:B5:19:01:82:0A:B6:C4:75:96:83:97:81:77:B9:E2:8E
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285845A15DFE67F150E6E6398D6080
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        85.113.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fe:67:f1:50:e6:e6:39:8d:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=7f95cfbf-f0bb-45c0-989a-f652aaf01d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:2d:bc:07:91:92:7c:09:83:a9:94:89:c4:
                    74:66:90:a4:83:ef:8d:23:71:18:12:4f:71:22:d1:
                    5a:95:74:88:32:64:27:29:27:d8:cd:06:dd:df:9d:
                    1f:91:db:4b:a7:cf:f4:1d:4f:34:54:d3:b4:74:6b:
                    8a:ec:9b:e8:94:23:37:8f:9d:89:43:da:fd:78:dd:
                    c4:e1:b4:9d:2c:58:fe:e5:f6:c6:2c:2f:9b:ba:13:
                    98:a1:74:d7:aa:51:f4:24:c4:f5:38:22:50:55:1a:
                    69:75:23:ab:1d:8e:04:cd:e8:45:ef:aa:00:97:7f:
                    59:5b:e6:ff:05:ec:bd:4e:16:fb:68:01:3d:d5:21:
                    b5:54:08:c1:9c:ff:72:ca:3c:2c:a2:9c:36:13:57:
                    66:a6:a2:1e:ae:cf:4f:2e:b8:bb:96:8f:87:38:e3:
                    6b:43:d3:86:52:de:62:f8:c3:c9:52:1a:81:ec:7f:
                    31:61:a8:ae:75:ca:44:30:a8:4a:62:5c:18:a5:33:
                    4b:57:54:44:14:77:5c:b2:ca:8d:c3:2b:e9:42:af:
                    f6:01:35:c6:12:b4:3a:fa:80:3b:5d:09:cb:23:db:
                    1b:be:30:0b:5c:8f:70:83:e3:a5:c3:63:50:d0:94:
                    34:c8:8a:61:91:40:9b:91:8b:52:87:ea:41:e7:3f:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:58:E7:B5:19:01:82:0A:B6:C4:75:96:83:97:81:77:B9:E2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:57:da:d3:2a:89:66:3d:60:27:53:80:ce:1b:17:91:fa:
         02:ee:24:c6:3d:eb:b3:42:38:d3:a0:34:b8:f1:5b:8a:44:71:
         f3:da:81:88:7b:82:c9:04:5a:91:c5:7f:71:10:16:60:e4:92:
         3a:67:db:83:b1:60:65:14:c4:20:d8:9f:2c:33:6e:f4:3b:a7:
         cb:77:8e:19:51:a9:1f:8d:2d:91:45:44:f5:bb:f4:31:8a:dd:
         e2:b9:99:06:9f:a1:3f:08:86:ef:e5:8a:f1:7c:41:b2:a2:5e:
         2c:cb:1a:48:27:1c:9e:9f:bc:0d:2a:9b:6f:54:76:57:ec:49:
         b1:1e:dd:7e:71:13:97:97:83:84:08:3a:6c:ed:49:61:20:9d:
         8e:30:9c:64:cb:dd:69:e6:ec:41:12:e4:82:e7:70:a5:ef:80:
         1a:be:86:77:b9:0f:1b:30:ce:93:aa:cb:88:df:13:81:af:ff:
         8a:fc:15:c6:e0:b2:d4:0c:fa:b1:76:b8:06:2c:5d:83:70:53:
         c3:6e:33:4f:ce:05:c2:ca:ad:62:99:8b:5c:18:65:d8:53:1f:
         1d:45:cb:62:01:d1:fa:44:b5:4f:70:37:30:d9:a9:8a:6f:0d:
         e3:4f:ba:2c:09:f3:83:ff:92:4f:88:21:4b:90:7f:b0:ea:5f:
         41:51:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:11 2024 by rpki-client on console-ams.rpki-client.org