Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa
File:                     a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa (raw, json)
Hash identifier:          iC7ENIQZGknlT3A4MNNNn56QSq2+bMDXSxeJ66jccIc=
Subject key identifier:   88:7E:E7:FD:21:F1:10:87:29:38:F1:AB:2F:10:7F:58:BB:6A:89:02
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F432858462A66C91B6315640EFFC25F80
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa
Signing time:             Mon 10 Jun 2024 15:04:04 +0000
ROA not before:           Mon 10 Jun 2024 15:04:04 +0000
ROA not after:            Sun 08 Sep 2024 15:04:04 +0000
asID:                     19605
IP address blocks:        164.152.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2a:66:c9:1b:63:15:64:0e:ff:c2:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Jun 10 15:04:04 2024 GMT
            Not After : Sep  8 15:04:04 2024 GMT
        Subject: CN=268a3acc-6cfe-41bd-b02a-9e44d9f3f4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:3c:df:48:82:7a:67:aa:26:a6:ff:45:ba:
                    b0:eb:34:c6:f1:58:d5:cb:26:f0:45:e9:99:6f:4c:
                    fb:9f:c8:a8:45:6f:bb:f7:58:58:46:95:c9:9d:f5:
                    45:87:9b:ea:02:a8:3f:84:89:1e:a3:db:8c:7a:c7:
                    51:b8:da:41:c9:3c:72:39:4a:c9:44:30:1a:e6:eb:
                    70:de:2a:7f:be:f8:59:bf:2f:a9:2e:b8:04:ab:cd:
                    23:b8:1e:81:ab:06:d4:18:b7:c6:e0:57:46:6c:01:
                    9e:c7:b9:f9:94:f1:af:14:3a:8a:63:55:ec:69:f4:
                    9c:16:62:83:73:c5:a9:5f:d9:32:32:52:22:3a:e9:
                    66:43:2c:e8:2d:18:07:90:b1:d5:cf:95:46:3f:0d:
                    47:c9:fc:9c:67:3f:54:15:42:3d:c7:43:73:c4:87:
                    61:9f:be:3e:9f:9d:07:6a:e8:ab:71:1e:3e:66:01:
                    36:79:3c:21:7b:56:f7:1d:fb:6a:d6:f4:bf:9f:75:
                    d8:dd:5e:a0:76:90:b3:ae:f8:f4:e1:d3:f3:9b:3f:
                    c6:b9:be:ef:87:50:9d:db:fa:3d:75:f2:e7:fe:d7:
                    91:3f:c8:36:dd:c7:e6:e7:0d:49:ed:b8:cb:4c:32:
                    27:24:51:d5:9b:25:cb:9e:7e:42:6f:d7:c7:17:44:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7E:E7:FD:21:F1:10:87:29:38:F1:AB:2F:10:7F:58:BB:6A:89:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:8c:e7:e7:a4:18:29:a1:17:6c:df:b7:09:89:04:1a:4f:f5:
         3d:11:4b:d6:0c:e4:35:52:bb:7e:ad:26:5f:e1:14:f4:84:20:
         3b:44:77:b6:70:36:0a:58:b6:f4:fa:d3:74:27:81:11:f7:04:
         a5:50:43:9e:2e:fe:c8:d1:f3:db:57:ae:d6:e3:9b:7d:93:2d:
         55:ba:82:0e:95:2f:82:e9:de:93:34:6d:5c:57:6b:92:56:d5:
         4b:53:3e:d4:29:83:7a:2f:b7:2f:5f:51:f3:28:44:ce:bd:e2:
         5b:14:dd:3c:d6:18:87:de:09:10:fe:01:48:4c:87:97:75:f7:
         fc:68:cb:1c:eb:eb:89:69:da:5b:0e:51:a4:84:dd:80:d7:8e:
         c9:36:c0:69:e6:a9:ec:c0:4f:5a:3c:0f:f9:79:cd:ba:8f:60:
         88:c3:26:c7:f1:a4:ac:33:8a:4d:9b:9a:d4:d2:99:29:08:88:
         2b:e5:98:c8:f8:bd:e9:27:18:36:b6:d1:cc:4e:d9:07:a4:24:
         51:01:63:66:65:84:c9:c4:3b:97:e3:a2:1f:ff:04:9b:47:87:
         87:fa:7d:af:ac:a3:3f:3f:fa:27:d8:e1:91:27:17:60:21:6c:
         ae:50:90:9c:14:e0:cb:95:f3:da:b2:cf:a5:08:32:c4:10:72:
         f9:d0:00:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:00 2024 by rpki-client on console-fra.rpki-client.org