Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
File:                     53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa (raw, json)
Hash identifier:          6F6pnMB87jgaCIs0PVo3Y+OYU3B4scX5dSNZKOil33k=
Subject key identifier:   11:15:71:5F:9C:22:F1:A9:9B:8E:D0:B8:15:0D:64:D9:F4:72:A0:97
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285847E35F6EF61483C39DD674F720
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11272
IP address blocks:        198.28.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:6e:f6:14:83:c3:9d:d6:74:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=e5b9faaa-7e03-4730-b262-124e2b3bd4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:f5:47:81:74:a2:6c:52:82:57:33:34:6c:
                    e5:1a:f1:21:67:49:aa:75:17:2c:ce:15:2a:96:7e:
                    72:9b:78:23:34:90:d7:c9:25:5f:f3:70:23:37:a0:
                    1d:4e:69:0c:e9:de:13:8c:9e:ee:a9:2f:4d:9d:02:
                    45:c1:66:a5:a9:30:12:60:d0:c3:6e:cc:f6:22:99:
                    32:93:b4:96:32:17:26:bc:5c:95:d2:c6:e7:1f:18:
                    5b:bc:4c:a1:c6:ff:78:9d:30:aa:fe:35:2e:b0:55:
                    63:67:54:8d:86:d6:94:5e:eb:70:cb:07:50:25:c6:
                    51:e6:89:a0:45:df:82:a9:59:af:64:2a:45:1c:55:
                    bb:57:c9:86:9e:2d:2f:93:5e:e4:89:f0:3f:5c:17:
                    09:9e:e1:c9:9f:42:4a:c7:cd:73:67:b7:2a:ab:c7:
                    6e:23:31:d6:cd:96:b4:b8:93:de:59:60:5e:5c:61:
                    3a:b0:a6:dc:c6:0e:d0:2b:93:7a:75:0a:80:08:de:
                    f5:5a:80:a9:99:8e:a0:f1:26:df:bd:af:4b:87:67:
                    22:87:fe:bc:1f:2c:43:90:90:a2:fe:51:e8:d7:81:
                    55:ae:1b:de:f8:52:7b:08:a6:f1:b5:29:a9:45:00:
                    8a:2f:39:df:1c:40:4d:93:dc:b9:f3:16:a1:71:7c:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:71:5F:9C:22:F1:A9:9B:8E:D0:B8:15:0D:64:D9:F4:72:A0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:94:db:37:ee:02:e2:f0:c0:9b:68:89:8b:e3:92:0a:f6:
         29:87:7a:6b:f2:bf:87:f6:d0:9d:0c:c4:01:50:32:6a:09:3c:
         3e:a5:dc:fc:e5:ff:bc:85:6c:d2:2f:0c:e5:17:1c:86:73:89:
         f5:ca:3d:16:59:1e:fb:5d:41:ed:c0:da:38:96:eb:89:d7:b1:
         cf:90:26:79:8e:dc:42:d5:51:ec:fb:5c:59:f6:f7:b0:7f:e2:
         e4:33:03:78:36:36:c9:2d:9b:65:bf:6f:5e:24:30:04:9f:7f:
         9e:ac:19:dc:68:5d:76:93:1c:41:c6:21:70:2d:cf:53:03:2a:
         6b:c7:c5:97:30:47:19:aa:8e:0b:6b:31:ce:25:97:c4:53:20:
         1d:f3:eb:33:d2:97:27:fa:56:d2:20:19:d3:c9:76:39:1f:cc:
         dd:90:3f:f1:19:07:c4:d6:ca:a5:5e:23:cc:b0:b7:f2:35:48:
         10:c4:34:3c:4d:b8:1f:14:ef:c8:0b:be:64:12:1c:5b:ef:11:
         9c:ce:1a:41:16:66:2b:c1:4d:52:74:e1:cb:bc:30:8a:d3:7b:
         e0:93:78:ae:6e:4d:aa:c1:f5:c9:77:fa:ff:4f:3f:c3:36:06:
         3b:28:11:34:b3:40:b5:e7:7d:9a:e3:5d:a4:f2:05:0c:41:82:
         11:ab:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:02 2024 by rpki-client on console-ams.rpki-client.org