Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
File:                     f0853596-0315-33ac-b801-86570db6ad6d.roa (raw, json)
Hash identifier:          M5VPryrvjtsCN9Tyzwmp14x4D7Os5L2G5YpqU5kpePA=
Subject key identifier:   ED:31:67:E6:50:D6:3B:7D:8E:CA:7B:37:0C:F9:1B:AD:24:08:89:8F
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F43285847B3CC0ECEBB3E4C297B924190
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     395201
IP address blocks:        134.65.194.0/23 maxlen: 23
                          164.152.162.0/23 maxlen: 23
                          169.155.46.0/23 maxlen: 23
                          169.155.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0e:ce:bb:3e:4c:29:7b:92:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=ca797188-91d8-423e-84ad-a7b0943aada0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:a9:2b:a5:5e:e8:dc:10:ac:68:b0:5b:2e:
                    a3:09:7f:33:1f:f3:da:70:7f:4b:f2:fc:49:3f:f4:
                    b2:c5:1a:fa:2d:98:87:eb:4a:83:91:6d:fd:a3:54:
                    28:95:14:db:e0:8f:ea:39:7c:9e:dd:24:01:03:95:
                    9d:59:00:88:db:17:c6:f5:b0:96:92:8d:8e:22:21:
                    04:6e:a0:86:79:ba:75:a5:17:53:05:df:d2:c5:0d:
                    39:a0:12:87:c7:d9:d4:ec:e2:b1:28:40:8f:bf:42:
                    69:36:b5:09:e7:3a:da:68:16:d1:5b:71:db:c0:9f:
                    c9:d1:c1:17:ac:5f:9b:b6:52:e1:75:69:f7:40:af:
                    71:c2:81:00:69:4e:86:b9:f8:0e:96:82:25:16:a4:
                    bb:69:23:e4:8d:1d:b6:19:96:c7:a4:f8:78:8e:39:
                    5a:b0:2c:44:b0:5b:89:c0:52:55:b9:fa:19:33:b5:
                    19:67:01:b6:c1:ff:be:9d:28:ea:c2:e0:f8:5f:c6:
                    74:b4:5b:1b:3d:29:27:a4:04:ee:ca:c1:eb:7f:01:
                    8e:87:8c:59:11:40:4c:9b:56:fb:a9:20:87:1d:07:
                    f4:e8:41:13:d8:0f:e3:a2:5b:cc:3c:f8:44:25:90:
                    85:8d:6d:c2:19:b3:a7:65:ae:f4:99:a8:99:f9:f9:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:67:E6:50:D6:3B:7D:8E:CA:7B:37:0C:F9:1B:AD:24:08:89:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.194.0/23
                  164.152.162.0/23
                  169.155.46.0/23
                  169.155.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:c5:88:3c:0a:1d:eb:c5:97:ab:35:33:56:61:b8:76:2b:
         86:1f:a1:79:79:56:55:96:8b:4c:2e:ae:37:e8:3e:8f:1f:9a:
         48:48:b9:ce:91:5b:02:bb:9e:2c:fd:df:4a:d6:b2:9b:f0:19:
         ee:a0:20:d8:45:be:a3:f5:d1:14:d4:6f:21:24:ba:c0:67:e2:
         cd:22:35:bd:3a:18:9e:1a:d8:8a:50:b2:34:b7:13:83:a1:78:
         0d:20:89:24:19:49:eb:1a:54:05:75:3a:0c:43:61:4a:a3:a7:
         03:81:7e:30:e6:d4:71:08:86:00:f1:4f:94:d0:43:7b:98:a3:
         16:af:9b:df:b1:c5:a2:bf:2d:94:c3:27:c4:ca:52:ad:5c:24:
         b6:a4:6f:36:4b:69:fa:c0:82:f5:ef:fc:1e:7d:e6:40:1e:c5:
         52:4f:61:5b:a6:29:24:7e:37:dc:5a:95:92:13:42:b5:d2:33:
         97:5a:1b:ed:ba:e3:0f:ea:dd:d2:9c:f6:98:68:b8:4d:ca:6f:
         a7:05:3f:23:67:4d:fa:dd:49:50:03:d4:a8:8c:56:32:e9:a7:
         5b:fd:d8:83:4e:ad:3f:9e:bc:bf:76:c9:79:3a:fb:ac:29:07:
         ae:b9:7b:10:c0:74:65:01:7f:fd:1a:1a:fa:eb:9c:07:15:10:
         e2:9a:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:01 2024 by rpki-client on console-ams.rpki-client.org