Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
File:                     dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json)
Hash identifier:          OljsoWFgxHU0K/yx5G1NvnoUCOnXk5mJVHdt10FCRYQ=
Subject key identifier:   92:73:3B:E3:CB:E5:CC:A5:1B:76:56:15:A6:4C:D8:9B:4C:8A:4C:79
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584518B04A745396200FEA8D9280
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     63199
IP address blocks:        148.153.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:4a:74:53:96:20:0f:ea:8d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=ec06f57f-5459-440f-a9aa-cb4b8f5316e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:4b:45:f5:84:14:7e:f2:67:03:a9:c6:6c:
                    1a:55:36:3d:69:24:ec:ed:1a:41:7f:c9:76:fc:72:
                    0e:bf:c9:eb:70:0e:2f:02:1f:d9:65:40:da:42:bb:
                    03:df:2d:bb:eb:79:6d:8d:8b:ef:5f:d7:a8:60:55:
                    3e:85:10:68:59:b5:b4:cd:cf:0b:b3:1d:17:6b:35:
                    e5:a0:13:9f:f8:75:f7:35:b5:81:c5:96:f5:f3:3c:
                    d0:4f:7b:a5:4e:1d:7e:d9:44:b5:9f:d9:b1:19:bd:
                    68:58:e4:d8:9b:79:8e:8e:92:06:22:58:a5:b0:8e:
                    92:34:7a:e8:cb:68:ec:e7:0c:03:09:3c:2d:7f:77:
                    c1:91:06:98:a4:71:ac:63:9f:bd:6c:dc:fc:e8:03:
                    36:00:b8:b2:ec:c8:f9:7b:43:a5:a9:4c:15:9e:2c:
                    6e:04:e0:9a:96:15:bc:72:e8:9c:1a:af:19:48:0c:
                    0e:a8:59:20:84:ec:d0:c3:06:0f:95:1c:ad:a3:72:
                    b5:1f:6a:9a:a9:0e:36:ae:86:00:1b:9f:22:11:48:
                    30:05:21:fd:42:cd:e7:08:15:99:97:73:48:9c:2e:
                    42:15:08:de:d3:55:1d:6c:a9:d3:4f:9e:8f:81:73:
                    f0:be:ab:28:b2:92:69:ac:77:cb:00:7a:53:d6:33:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:3B:E3:CB:E5:CC:A5:1B:76:56:15:A6:4C:D8:9B:4C:8A:4C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:08:41:68:3f:02:ed:01:b5:1d:81:8c:4f:d2:07:92:c6:60:
         e2:69:b5:27:31:f6:93:59:5a:b0:bd:08:7f:92:e6:47:da:a5:
         2e:0a:fc:96:90:61:b5:0f:d4:6e:a5:9e:9c:24:a1:69:a3:ea:
         81:3e:bd:b1:0c:b5:fd:ed:38:5f:1b:54:3b:ad:10:f6:82:10:
         d8:0a:8b:dc:da:7b:7b:ff:18:8c:c7:b7:ae:a7:b8:2f:ec:78:
         af:e4:af:4b:06:fb:c8:df:69:3c:37:d6:0a:ed:1c:4e:99:a5:
         57:72:7a:02:0e:3e:14:9e:31:3f:07:fa:78:af:fe:ac:bb:48:
         69:00:63:55:06:cc:e8:91:77:07:49:a2:cb:23:39:28:b2:7b:
         bb:d6:07:cb:75:dc:ee:89:c6:32:dd:90:52:0e:11:e6:b2:ed:
         fc:2d:01:91:bb:c2:cd:ad:0b:7f:fc:f8:82:f1:79:90:3a:79:
         d1:52:a6:e1:f6:a8:b3:83:b0:2b:23:5f:41:7d:3d:d1:68:9c:
         f9:86:f6:d5:79:f5:fa:41:1b:73:46:99:6b:12:85:b5:6b:06:
         09:49:59:d1:42:1a:4e:f7:9e:3f:50:fc:91:d0:a4:03:a2:39:
         f3:f5:29:6e:de:b7:47:55:f1:8b:00:42:d8:0e:ae:17:bf:d9:
         5f:b7:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org