Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
File:                     49372caa-80a6-338e-b361-ca20bbf60b2b.roa (raw, json)
Hash identifier:          lYcTolWB7ZU48p1zfHlFrewgqE3oh77CwNSB4tl+6VQ=
Subject key identifier:   45:B8:30:DE:A1:1B:36:8B:28:F2:D5:E1:C8:83:6B:1C:2C:42:B7:08
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584518B04A5F31C37A6F57879A00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     63199
IP address blocks:        148.153.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:4a:5f:31:c3:7a:6f:57:87:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=3eea6e13-6208-4e81-a70a-3fca769b0d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:4f:c3:00:8d:70:9e:92:6d:26:73:a1:7d:
                    4f:9a:08:e1:8f:48:69:b0:12:55:12:ab:9d:a7:ce:
                    ed:40:0b:fd:d1:6a:28:5d:89:4c:38:fb:de:7b:25:
                    e2:90:ba:19:d4:f4:59:4d:e8:f4:7d:74:d8:7f:e6:
                    af:16:c8:a1:74:aa:f9:b2:49:1b:5d:19:3f:79:f9:
                    12:b8:29:cd:a3:c3:36:69:43:5a:ba:51:04:c7:78:
                    4f:27:b2:92:6b:6c:41:13:63:fc:7e:c9:60:da:6d:
                    e8:99:ec:be:6c:0a:47:9c:08:5e:ee:77:e3:77:3f:
                    fc:e5:01:32:92:53:e9:45:2f:00:fa:52:73:32:a6:
                    2f:cc:f4:27:9d:64:01:e1:c8:20:da:f8:57:d0:00:
                    fe:db:e4:6d:81:2c:fb:59:4f:05:4f:bc:39:7f:9e:
                    a9:41:b1:82:62:8a:f3:1b:5c:8e:f2:4f:c5:a0:9e:
                    44:43:9c:c1:4e:c4:cd:6e:73:5f:43:9e:79:23:70:
                    09:1d:a2:84:dc:74:19:12:22:a1:d5:74:49:dd:4d:
                    32:c9:cf:45:05:97:2d:25:4d:27:79:f5:cf:ab:e1:
                    83:54:e9:f4:a9:d0:88:6c:fa:32:fb:15:94:0a:4a:
                    2f:e5:3c:db:84:7e:f8:7b:5d:29:18:e4:4f:15:51:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:30:DE:A1:1B:36:8B:28:F2:D5:E1:C8:83:6B:1C:2C:42:B7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:34:33:bf:7b:0d:1a:d9:bc:47:8d:b7:d1:b5:4c:da:89:4a:
         30:ff:06:b9:b0:8f:02:b7:b7:af:f4:ec:ac:50:46:81:c2:24:
         13:e6:7c:7c:a0:20:5f:cb:7a:cd:b3:68:ae:d7:1e:f9:89:28:
         52:30:28:b6:ef:12:83:8a:c9:43:97:fc:50:43:79:64:ca:ba:
         8c:b6:21:b0:a0:4e:a1:89:11:98:47:6c:ec:ab:10:a6:77:81:
         f7:e1:32:10:7d:8b:ae:8c:f6:85:9c:f7:e0:7e:53:39:10:ed:
         1e:c3:41:56:26:43:fb:74:f4:62:37:63:be:da:ea:38:7b:d2:
         e6:4f:f0:50:3e:0f:af:51:b8:16:50:81:23:16:24:b1:ba:89:
         1f:22:d3:35:c7:4e:f0:a3:b7:70:81:86:fe:7e:07:63:67:88:
         32:52:38:e1:63:5b:0e:ae:96:2d:a1:40:8d:0f:52:d5:7b:cd:
         f0:ea:d0:f5:2b:6a:d3:f1:6e:6d:48:d6:56:e9:8b:74:ad:8b:
         6a:e6:ff:0f:bb:ca:5c:9e:6c:f7:b2:5b:ae:88:ae:13:43:ba:
         b1:9b:4d:0d:42:03:4e:f4:6e:eb:40:c7:be:16:0e:02:e4:43:
         4a:b5:b8:11:e2:0a:e2:0b:f5:34:9f:71:f3:6e:a7:c1:7b:e8:
         d6:82:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:46 2024 by rpki-client on console-ams.rpki-client.org