Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
File:                     0e5a24d6-c66c-333e-a464-a98bf11ab068.roa (raw, json)
Hash identifier:          Me+yOkX1bdLGclPk2erQ1mdnYeEU0zjzDSKLhvNE31o=
Subject key identifier:   6E:94:D2:4C:4D:20:F6:0E:EF:30:D1:17:54:75:8A:05:01:78:0D:99
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F43285847872129A41F0188F56AD63280
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        143.116.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:29:a4:1f:01:88:f5:6a:d6:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=157322b2-4e18-455e-8599-e12178eb02ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:0a:fa:86:5c:24:43:02:55:e5:78:0b:ee:
                    98:03:8b:bd:2c:a6:f8:0f:58:30:6f:d7:b7:37:46:
                    b6:24:93:b4:04:18:c7:88:9e:14:78:f9:2c:70:35:
                    0e:94:54:8c:11:90:62:08:f5:56:cf:f7:2c:d6:ea:
                    3e:77:e5:c6:ff:b2:6d:26:10:2b:66:7e:78:ce:02:
                    43:26:5e:ae:a5:9e:9d:e5:2a:0d:9d:92:5a:8d:01:
                    fe:10:92:76:7c:31:f1:aa:f4:db:e9:3a:84:04:56:
                    bf:f9:de:65:5a:e6:a5:66:56:c1:14:33:a8:87:6b:
                    4a:8c:de:db:64:2e:a7:f7:cf:19:1f:52:ba:a8:bb:
                    75:1b:da:7f:da:9e:aa:17:c1:96:86:3e:83:3f:f4:
                    34:0b:1c:ed:39:f2:7e:36:a7:13:33:af:45:cc:0d:
                    0c:e6:d0:ce:43:d6:43:17:65:f0:19:36:22:b0:a8:
                    95:c6:e3:7c:6d:ce:f7:4c:89:c7:5c:9a:c7:05:b4:
                    c8:93:86:c6:d3:cb:fe:d7:65:c8:1d:3d:67:20:2f:
                    e7:86:47:22:57:37:d1:3f:09:68:55:5c:df:72:a2:
                    07:86:82:b2:9e:4a:1c:65:bc:6e:39:26:9e:18:5f:
                    4a:0b:95:74:cc:7d:5f:ee:04:70:09:04:69:24:41:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:D2:4C:4D:20:F6:0E:EF:30:D1:17:54:75:8A:05:01:78:0D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:54:41:45:2a:ba:22:62:e1:fa:c3:4b:f8:51:d6:fe:2e:f2:
         f1:db:7c:01:66:bf:d2:b2:2b:21:97:52:77:a3:ba:fb:3c:57:
         21:5b:64:60:45:8c:ed:f6:ad:02:3f:89:54:01:4a:ee:8d:08:
         f5:5d:46:a5:b2:4c:24:14:28:25:ff:ac:c3:9d:5d:f2:56:88:
         0e:86:85:fc:c6:c0:ee:d4:dd:d3:96:78:a6:05:28:20:54:90:
         57:a0:5f:54:96:85:a6:07:74:f4:df:0a:9f:89:b5:1c:15:66:
         0b:ed:00:48:d9:0e:50:ed:5d:ba:08:e5:9d:cc:ab:9e:ee:bb:
         9a:34:70:da:dc:ab:b6:97:dc:8d:14:cc:2d:c5:88:1b:01:4a:
         51:e7:84:db:02:57:bb:8c:48:78:34:77:dd:ee:91:e0:b7:ea:
         ef:47:e1:3e:1d:be:e5:97:99:c4:2b:ff:05:68:ce:32:e0:a6:
         e9:83:e7:e0:2a:78:03:17:e1:03:c5:bc:aa:37:8e:30:88:96:
         6c:ef:bf:1b:18:4b:46:48:d8:b8:ab:07:98:57:7a:64:93:93:
         f8:50:b3:4f:89:2e:8c:82:63:0a:c6:b8:b9:40:bb:8f:c4:0a:
         22:c5:3d:9f:a7:8a:2d:01:bc:36:8f:f5:dd:ac:dd:e2:b8:69:
         a6:30:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:13 2024 by rpki-client on console-fra.rpki-client.org