Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa
File:                     cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json)
Hash identifier:          LPyIDKpWaPPA+G081c12JpXLfsv5g9YyhY+xncDokqs=
Subject key identifier:   4E:EE:0E:3B:81:1A:5C:C4:79:E8:26:72:46:43:C7:16:C4:76:51:87
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F432858457A487AD6F5C58FDAAB6F8780
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        208.70.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7a:d6:f5:c5:8f:da:ab:6f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=8986fc7f-1dff-4268-974d-e62664197afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:fb:a7:ce:ad:64:f7:80:4a:17:8f:c9:c0:
                    2b:75:fb:47:5d:fd:59:99:de:e0:0e:ba:bb:20:0c:
                    6c:23:df:61:9b:4b:39:31:93:d1:eb:be:eb:7b:4f:
                    ec:a8:d2:f4:4e:52:71:3d:80:a3:6f:33:1f:93:07:
                    90:73:45:a4:5c:c7:42:9d:ea:d8:4c:c8:cb:55:9e:
                    06:dd:a0:0f:10:20:27:42:82:95:87:1c:d5:dc:fc:
                    bf:96:b0:ff:1b:61:e4:28:89:9d:8d:2b:df:e1:29:
                    76:ce:e0:90:01:c0:8d:aa:b0:04:d9:ce:fa:fa:91:
                    17:29:cd:b5:67:85:48:3d:78:ae:81:6c:16:ae:08:
                    0b:98:07:12:76:bb:b6:84:3d:5b:9f:b3:3d:9c:33:
                    bf:e5:09:2c:6d:f1:58:57:7b:85:b8:ff:93:a5:be:
                    40:8a:cb:05:ec:0b:5d:35:85:bc:e1:65:6b:1e:fb:
                    27:2f:00:a0:24:9f:04:ce:53:1b:40:b7:57:ee:87:
                    a0:f8:bb:24:b1:72:36:e1:04:5b:5d:8b:62:70:ab:
                    79:a3:46:03:5d:e0:b4:17:0f:9c:ca:c7:58:f1:dc:
                    ce:6b:9f:c9:ae:49:c7:6c:8d:d5:6e:8b:b0:26:18:
                    80:7a:a0:89:27:83:fe:2b:98:bc:78:33:15:08:dd:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EE:0E:3B:81:1A:5C:C4:79:E8:26:72:46:43:C7:16:C4:76:51:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:2c:4f:b8:72:f2:c8:60:ba:52:08:4b:06:6b:a4:0f:85:
         60:b4:d0:e8:a3:67:9c:b6:80:68:d0:08:fd:89:86:e4:93:59:
         9a:a2:ff:b8:35:6e:b0:a6:69:ef:da:a0:60:00:9a:de:74:18:
         6c:83:34:63:1e:56:c5:52:0f:37:91:53:6a:b9:75:7c:95:74:
         5c:71:ea:25:c8:c5:77:83:2e:75:2f:ed:9f:c9:b5:af:35:bf:
         0b:40:9d:50:e4:6a:e4:85:39:71:a2:4d:9d:1e:37:a1:52:8e:
         73:09:f7:aa:c0:0b:b1:58:01:ba:62:39:33:79:14:76:76:77:
         a0:c8:2f:e9:75:ef:ac:c6:e9:cd:0e:1e:b4:d4:56:db:e0:2c:
         d5:0a:51:5f:f5:39:a9:65:b8:0d:4b:b9:69:83:46:3c:fa:48:
         2c:93:ee:7d:dc:ab:34:c1:11:9b:74:70:e5:fa:97:ab:31:05:
         b3:9f:e0:cc:60:8b:a9:32:90:9d:db:2e:f7:18:5f:d0:d2:c2:
         ba:f0:4a:fc:46:83:cf:4c:b4:1c:ef:f0:f0:30:5a:73:4f:c3:
         9a:ed:7b:a9:12:f2:2b:1c:12:e6:fb:7e:c5:7b:31:05:cf:f8:
         f2:ce:11:d9:59:d9:93:d5:05:01:42:dd:d5:66:81:3a:90:82:
         08:e0:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:38 2024 by rpki-client on console-ams.rpki-client.org