Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
File:                     aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa (raw, json)
Hash identifier:          DCbtUSnEvigyhhCfvG3O+Bvz+/HacPKj4bmKGfNOgkw=
Subject key identifier:   31:BA:68:F2:08:F1:56:D0:57:E9:FB:09:9A:5A:AC:8A:95:38:CC:59
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F43285845CE090CDC711493A47DAD9A34
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     14203
IP address blocks:        198.186.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0c:dc:71:14:93:a4:7d:ad:9a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=652cd98d-3b7f-4b7e-9849-77d76a0e4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:5d:d0:f2:8d:25:6a:5f:a0:3c:7c:64:2a:
                    bd:4a:8a:d7:5d:38:1c:21:c2:68:f7:5b:44:a4:3e:
                    84:ee:df:3f:42:0c:af:98:97:02:6c:cd:78:9c:fe:
                    2a:56:99:c1:77:6a:f1:b6:94:b5:90:cc:16:7f:e8:
                    a0:b2:d7:3f:26:4a:03:ab:ae:e6:db:f3:05:0b:41:
                    30:f7:34:29:4e:44:95:61:73:7e:bd:f9:2e:14:91:
                    c0:e4:0c:8d:ef:2b:dd:0f:65:63:46:56:fa:71:bd:
                    64:a4:e7:35:43:22:83:f2:53:c9:4c:0a:14:9d:86:
                    1c:43:0d:2e:57:91:03:49:32:d2:86:a6:c1:da:18:
                    8f:4d:e5:c6:30:fa:f8:d1:87:e6:0c:a0:8f:e9:ba:
                    a4:cf:d6:f3:93:90:85:c2:7e:ef:4e:c7:b3:da:25:
                    78:f2:c7:ef:2f:9a:82:54:a4:fa:db:e9:72:a5:44:
                    0d:50:2e:37:97:da:fc:03:90:f8:52:8b:f1:e1:a8:
                    fc:2e:5f:27:ce:60:70:41:25:9d:48:30:52:67:8d:
                    82:d6:a0:ce:ef:4a:09:ad:2c:c5:0e:98:68:1e:56:
                    aa:dd:d0:55:2c:67:e6:b9:18:c6:ee:b4:92:1b:00:
                    db:b1:ff:e4:c0:bc:88:23:19:bb:dc:1d:43:47:14:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:68:F2:08:F1:56:D0:57:E9:FB:09:9A:5A:AC:8A:95:38:CC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:6b:68:a3:5b:2e:1a:f6:b6:0c:a2:17:e8:d4:57:61:24:
         f8:41:31:65:66:19:02:7e:8f:c5:b2:46:05:05:3e:ea:34:06:
         6c:b1:d1:46:5a:6a:32:73:b3:ee:01:39:71:cd:3a:1c:cb:93:
         37:5f:ed:18:27:06:4e:df:e5:9b:a5:03:15:17:54:85:d0:77:
         f2:8c:c4:f7:30:da:6c:96:df:8f:74:af:e8:c9:36:a4:f7:75:
         7b:c5:1e:2a:aa:12:68:cb:ec:91:04:30:6a:22:8a:fa:26:45:
         00:d8:b3:b5:d0:68:18:f9:e5:81:c5:3f:b8:90:19:08:58:10:
         60:23:68:a5:e3:26:0f:da:9b:b4:61:c1:b7:da:c5:77:f0:8a:
         53:ed:1a:07:c5:a8:b2:67:08:87:b9:dd:d2:fa:ca:88:cf:92:
         4a:5f:4d:84:25:9e:d9:94:e3:37:55:46:08:55:5e:19:39:8f:
         65:23:2f:17:bc:d6:74:1d:31:69:74:2f:70:ae:bc:d1:64:99:
         ec:3f:d2:1a:e8:c0:68:5b:b8:3a:e3:53:7b:e1:bc:16:80:18:
         d3:36:e7:4b:f5:32:1c:74:64:2a:40:f8:6e:2a:ea:63:01:57:
         be:ce:dd:58:b4:fb:02:3b:8a:70:60:e6:22:63:7b:7c:3f:60:
         74:b8:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:25 2024 by rpki-client on console-ams.rpki-client.org