Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f57a4eff-1ceb-3a84-8c17-61bee8929560.roa
File:                     f57a4eff-1ceb-3a84-8c17-61bee8929560.roa (raw, json)
Hash identifier:          ch7OzY1/vQCdy8Oa8ZCKDdFDBpdlTbJAAHHd9uxL/vY=
Subject key identifier:   70:88:ED:13:AD:56:F8:3B:D4:30:03:83:05:43:4B:2B:7B:E7:9F:E2
Certificate issuer:       /CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Certificate serial:       010D0C9F43285845C087536FD3CA4937581E76E0
Authority key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f57a4eff-1ceb-3a84-8c17-61bee8929560.roa
Signing time:             Fri 03 May 2024 16:53:57 +0000
ROA not before:           Fri 03 May 2024 16:53:57 +0000
ROA not after:            Thu 01 Aug 2024 16:53:57 +0000
asID:                     33635
IP address blocks:        162.255.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:87:53:6f:d3:ca:49:37:58:1e:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
        Validity
            Not Before: May  3 16:53:57 2024 GMT
            Not After : Aug  1 16:53:57 2024 GMT
        Subject: CN=2801a766-cbc0-4ddb-8874-4afc962dcbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:cd:1d:5c:c1:29:13:0a:4a:af:c2:ec:d8:
                    ec:cf:a6:48:bf:90:7d:06:fe:f9:b6:84:e8:fa:ef:
                    bf:6c:b7:67:dc:c3:7d:01:96:96:37:ea:0b:fc:43:
                    44:cc:b7:31:31:a3:d0:42:f9:1b:14:f4:03:54:44:
                    e7:c4:a4:25:08:ad:a9:38:54:07:c1:1c:8e:cb:98:
                    2c:71:0b:e8:bb:79:d9:c8:a9:8a:5e:ce:e9:7f:49:
                    a3:98:28:32:40:28:14:62:ae:14:96:81:11:76:9c:
                    aa:7e:22:0d:13:95:9b:5b:a4:54:27:fb:6d:35:8c:
                    e6:5b:ff:41:c6:cf:80:68:7b:51:0f:6a:8d:2c:18:
                    c2:72:f5:9e:4a:cd:9e:1b:40:af:de:4c:9e:6d:0b:
                    25:70:4a:99:0d:0f:82:2e:a6:6b:17:57:75:b5:0e:
                    2f:c8:db:33:91:ce:bd:cc:03:d4:bc:32:87:5d:25:
                    c4:67:c8:20:c6:af:5b:17:b1:0e:6c:a1:f6:38:15:
                    26:98:22:3b:bb:84:d6:06:bf:c0:7d:42:8f:b0:93:
                    b7:8e:3b:70:cd:83:51:29:a0:dc:be:9e:35:89:ca:
                    ec:01:73:a4:6c:90:24:2a:76:aa:c2:56:e7:71:3f:
                    58:16:50:42:ab:60:24:c5:90:86:a8:a7:ef:28:b0:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:88:ED:13:AD:56:F8:3B:D4:30:03:83:05:43:4B:2B:7B:E7:9F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f57a4eff-1ceb-3a84-8c17-61bee8929560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl

            X509v3 Authority Key Identifier:
                keyid:4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:90:9e:51:ae:6d:a8:6f:9f:1c:ce:c8:a2:93:7f:95:db:3f:
         4f:e2:f0:73:f3:31:fd:cd:5c:83:a2:01:7d:b9:24:e4:61:42:
         42:5f:ba:bd:1a:21:8d:d7:3d:cd:9d:18:4a:c8:b9:b4:04:6e:
         4f:7b:75:55:b4:7e:50:5f:25:18:93:68:22:34:17:16:4b:c4:
         78:f3:04:ed:9f:5e:b9:60:d5:a5:8d:9f:49:83:c7:c6:f6:8b:
         1f:eb:91:fb:f4:fe:a2:5c:fe:21:17:bd:42:a8:57:25:e4:92:
         ad:3f:12:4d:60:06:7f:f8:ba:a2:7e:74:dd:71:7f:8c:43:94:
         c8:73:1f:ff:40:35:14:1a:e2:f9:2f:f3:3c:64:44:af:47:a6:
         60:ae:30:0e:f7:ca:28:fa:f0:79:ab:c3:ba:42:06:2c:9b:6f:
         3f:10:17:79:dc:7d:e6:45:4b:60:87:7f:54:44:31:e4:d4:25:
         08:01:26:4c:c7:e8:81:f8:c2:38:68:d4:99:87:99:99:4c:3b:
         bf:c9:50:68:25:59:14:b0:aa:39:bd:4a:a9:df:8c:b7:33:e3:
         62:f6:dd:2b:5b:53:3a:9c:86:dd:b7:f0:16:a8:6d:65:75:e8:
         2d:d9:e4:a8:5c:28:ae:7e:aa:08:8b:40:0e:b6:9f:8d:ca:4e:
         e4:50:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:39 2024 by rpki-client on console-fra.rpki-client.org