Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa
File:                     dba8af52-288d-3489-a6c9-dbae1ec295df.roa (raw, json)
Hash identifier:          gyYzUDaX5UJ8+akEcY+J8q03VJXN5txdmbjqV7d/oYc=
Subject key identifier:   47:28:83:E6:69:5A:1E:2A:A8:B9:16:2C:13:1D:7D:7D:4F:EB:34:C8
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503ADA3CDCFE2EB0F9E7D10
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        157.52.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ad:a3:cd:cf:e2:eb:0f:9e:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=0e5a7603-0470-4489-b6b5-ee2f13f0edff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:f7:9c:e6:a5:d1:f8:1c:74:14:c3:ce:b5:
                    1e:2c:6f:18:bb:fa:0f:6e:96:5f:8c:78:ea:29:80:
                    c3:d2:16:a3:bc:36:bb:74:67:8b:42:33:0b:16:1d:
                    f9:2d:87:4d:7a:0b:69:5a:ae:96:a6:3a:03:cb:c8:
                    3a:33:31:99:38:92:da:fd:2a:3d:63:38:3d:0d:fc:
                    07:d4:35:98:8f:aa:69:2e:cb:f6:97:d3:db:21:48:
                    cd:f2:e8:f8:a5:bc:9a:e7:12:bd:44:bb:07:89:c3:
                    27:a3:fe:e6:91:84:07:18:aa:9c:f0:ed:0c:6c:02:
                    82:4f:78:47:bd:8d:01:e3:32:da:86:09:c2:22:39:
                    71:b7:28:9a:23:fc:a2:47:17:ee:ea:46:7d:32:ac:
                    79:20:79:b2:d2:51:f7:a2:fb:28:5c:05:0e:30:11:
                    cd:98:66:50:ca:1d:71:f4:05:e7:5d:bc:42:91:b8:
                    98:7f:ae:28:fb:f6:52:e7:18:dd:8b:a7:c1:a0:cc:
                    78:a8:30:95:d5:a9:e8:f7:f3:28:17:a8:2f:20:33:
                    e7:0b:88:0c:c8:9a:e6:71:7a:e4:c4:17:63:26:18:
                    e2:1f:bd:12:a4:14:62:08:10:76:bb:28:13:45:34:
                    ee:0e:20:9d:80:8e:95:65:f5:0d:c5:e7:57:93:08:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:83:E6:69:5A:1E:2A:A8:B9:16:2C:13:1D:7D:7D:4F:EB:34:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:67:14:47:d6:92:8c:13:a5:50:3a:11:29:9d:5b:ab:f7:
         35:99:2b:c7:16:16:93:7a:29:88:e4:a1:5b:0c:45:da:67:28:
         b3:2a:09:0f:3b:5b:8f:45:b8:1e:32:7d:09:4e:c0:02:8d:29:
         2b:97:48:e2:4d:4e:bf:7a:f6:8f:80:9d:89:ed:e5:d5:9d:3b:
         3e:b9:b1:b3:70:73:c4:2b:5b:51:28:5c:b8:8e:08:63:03:a8:
         87:c6:06:77:5e:67:f6:d8:87:a9:0c:25:1c:5d:9c:cc:15:45:
         27:b9:b0:ea:f9:17:f8:7f:06:3f:0c:86:29:2e:7e:c4:2f:b4:
         19:6d:5b:5c:56:30:06:60:f3:42:c6:89:62:12:79:05:a8:28:
         06:5f:fc:59:ba:23:01:5f:bc:e0:0a:1a:ba:21:ea:87:f8:80:
         fb:65:ed:20:47:a8:d9:fb:4a:52:fd:2a:1f:56:60:20:b3:65:
         37:98:d4:9d:37:15:4b:7b:bd:b1:75:ed:68:55:02:c9:f7:a3:
         18:6a:a9:fe:44:99:9f:ba:99:b9:82:67:11:01:35:9f:a1:58:
         44:e0:f9:88:c9:65:e4:93:de:0b:5a:a8:7d:cb:f5:20:b6:24:
         74:2e:97:c0:2c:9f:48:5e:20:47:c7:66:fd:57:f3:bb:cc:df:
         3f:ec:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:33:03 2024 by rpki-client on console-ams.rpki-client.org