Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa
File:                     151bc360-93b7-3bff-a30a-3f895e9106ca.roa (raw, json)
Hash identifier:          +oO5j/MPUgn9JAm7KCOKiImUSlywUCqvQi1UZEnbi4w=
Subject key identifier:   60:57:54:F3:94:27:6A:2E:D5:DC:CE:FD:8D:59:DC:9A:A8:9F:29:68
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847CA3F79B9B1B8BADCF8FC1B00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     46606
IP address blocks:        192.185.224.0/21 maxlen: 21
                          192.185.232.0/21 maxlen: 21
                          192.185.240.0/21 maxlen: 21
                          192.232.216.0/22 maxlen: 22
                          192.232.220.0/22 maxlen: 22
                          192.232.248.0/22 maxlen: 22
                          192.254.180.0/22 maxlen: 22
                          192.254.184.0/22 maxlen: 22
                          192.254.224.0/21 maxlen: 21
                          192.254.232.0/21 maxlen: 21
                          192.254.249.0/24 maxlen: 24
                          192.254.250.0/24 maxlen: 24
                          192.254.251.0/24 maxlen: 24
                          192.254.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:79:b9:b1:b8:ba:dc:f8:fc:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=3022d48b-b094-4263-a0cb-865df04cb7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:c9:57:13:cf:c2:d3:ce:c9:88:f4:e1:4b:
                    37:19:6a:dd:e8:11:8f:0f:01:78:b8:0d:d7:11:0f:
                    c1:bc:da:00:c3:91:1d:57:ba:d1:a7:f8:09:9f:47:
                    ff:fa:eb:e0:7d:92:0d:4a:01:c0:73:80:ee:7f:a7:
                    65:19:39:cf:ec:71:3d:12:7c:33:15:3a:4a:ee:b2:
                    18:15:0c:b9:1e:20:19:3e:27:82:37:14:1d:5c:ba:
                    bc:e7:d6:4f:ab:59:8c:15:4c:74:1a:38:61:bd:3b:
                    9b:cd:7e:c7:8c:a2:54:f9:1c:1d:0a:70:e5:ae:d7:
                    9e:6d:5f:b4:c1:84:c9:2f:4e:27:63:38:71:5c:af:
                    ae:d6:d5:31:80:a8:bb:5e:8a:c6:30:bf:c7:fb:14:
                    c5:b1:fc:c6:fa:cf:d2:28:cf:c0:3c:9b:d9:1b:3b:
                    1c:68:09:52:d3:71:05:b0:70:7b:2b:f2:37:8e:ef:
                    ba:12:a3:e8:6f:03:9e:66:6f:ad:52:54:2d:28:f4:
                    44:cd:7c:5f:52:46:09:36:8b:ce:a5:2e:9a:24:f7:
                    07:8d:70:b2:5e:11:ea:85:8b:77:81:f5:27:99:9d:
                    09:fc:a8:5a:2b:03:17:39:ca:d5:c4:dd:fb:26:37:
                    ed:f4:1a:43:07:bf:fc:18:49:bf:a0:e0:f0:25:23:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:54:F3:94:27:6A:2E:D5:DC:CE:FD:8D:59:DC:9A:A8:9F:29:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.224.0-192.185.247.255
                  192.232.216.0/21
                  192.232.248.0/22
                  192.254.180.0-192.254.187.255
                  192.254.224.0/20
                  192.254.249.0-192.254.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:06:e1:7c:26:57:7d:c5:64:2d:d4:d6:82:91:d4:a4:ce:
         81:59:a5:3a:69:c8:31:63:aa:f5:e3:da:49:83:75:84:ac:80:
         5d:65:92:4c:30:7d:27:79:a5:60:7a:9c:db:bd:fe:95:54:b4:
         35:24:ef:f6:e8:0f:9e:dd:22:97:0c:a2:8a:ec:39:e3:2c:77:
         f5:4f:4e:07:33:6f:b5:b0:84:14:ea:cc:04:6b:03:5c:54:39:
         63:65:1d:66:76:73:54:d3:95:8a:a0:e0:b2:6e:be:43:24:e6:
         2b:f8:84:62:ea:a5:14:95:f9:d1:c5:86:cb:18:fe:d5:98:98:
         3c:4d:d8:7a:b9:f8:a1:88:e4:4e:aa:4c:d8:2b:36:08:e8:48:
         ab:72:81:54:6c:ae:ce:85:f8:ec:d0:1c:32:c6:10:e9:0c:b1:
         8a:1d:40:9d:62:4a:d9:80:83:5d:ea:9d:51:16:56:c5:fa:56:
         58:61:66:ff:5d:ac:eb:21:ae:a5:0e:e3:75:c4:5b:b5:c4:a7:
         31:9e:37:78:70:ee:12:a9:9e:7f:9c:1e:36:53:c1:4d:04:8d:
         08:d4:b1:10:7b:b7:37:86:ad:52:e0:a5:e9:23:04:aa:d1:58:
         8b:f9:53:b9:70:5b:4e:e8:60:81:a5:d5:45:3f:ed:9b:27:b0:
         38:5b:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org