Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa
File:                     8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa (raw, json)
Hash identifier:          a564n1URB83P5FIGX5WSd4bd0FddNLg/GrOtrlJVhNU=
Subject key identifier:   F8:1A:1D:62:B1:F0:5A:E5:96:63:60:18:DC:EF:A0:0E:4F:24:67:F4
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F4328584596DBAAB6336C01F943195F00
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa
Signing time:             Thu 18 Apr 2024 18:39:56 +0000
ROA not before:           Thu 18 Apr 2024 18:39:56 +0000
ROA not after:            Wed 17 Jul 2024 18:39:56 +0000
asID:                     22252
IP address blocks:        161.185.0.0/17 maxlen: 17
                          157.188.128.0/19 maxlen: 19
                          157.188.0.0/16 maxlen: 16
                          157.188.0.0/18 maxlen: 18
                          157.188.12.0/23 maxlen: 23
                          157.188.192.0/20 maxlen: 20
                          157.188.208.0/20 maxlen: 20
                          157.188.252.0/22 maxlen: 22
                          161.185.0.0/16 maxlen: 16
                          161.185.4.0/24 maxlen: 24
                          161.185.7.0/24 maxlen: 24
                          161.185.30.0/23 maxlen: 23
                          161.185.32.0/20 maxlen: 20
                          161.185.150.0/23 maxlen: 23
                          161.185.151.0/24 maxlen: 24
                          161.185.152.0/23 maxlen: 23
                          161.185.160.0/24 maxlen: 24
                          161.185.161.0/24 maxlen: 24
                          161.185.182.0/24 maxlen: 24
                          161.185.208.0/23 maxlen: 23
                          161.185.224.0/23 maxlen: 23
                          167.153.0.0/16 maxlen: 16
                          167.153.128.0/17 maxlen: 17
                          167.153.150.0/24 maxlen: 24
                          167.153.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:db:aa:b6:33:6c:01:f9:43:19:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: Apr 18 18:39:56 2024 GMT
            Not After : Jul 17 18:39:56 2024 GMT
        Subject: CN=15a44ae3-b3c2-4177-908f-5266efa44098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:96:d5:b7:83:3c:9c:76:10:71:65:6f:d8:
                    77:ff:61:8e:2e:62:20:0d:24:8f:de:91:7b:f3:4b:
                    57:ec:3e:e8:65:a2:6c:7e:01:c7:03:53:d4:9b:32:
                    e2:97:37:07:7f:0f:a2:61:c3:ea:c0:4d:20:6c:12:
                    f7:73:88:1a:27:de:cb:ee:70:26:3d:29:dd:6e:3d:
                    21:ac:a4:ca:de:0d:20:95:c9:09:d1:f8:7b:9e:46:
                    43:b9:ad:2b:24:3b:17:4f:66:86:ab:e6:9e:67:e1:
                    74:a8:e9:d7:f7:84:4b:79:eb:0b:fe:da:e1:c5:ce:
                    99:77:d3:c0:0c:e4:5c:23:02:12:b8:6f:94:a9:73:
                    9a:f1:80:3a:e2:93:6b:2f:14:45:b9:12:44:cd:6f:
                    dd:b5:a4:8e:02:57:1c:73:1f:a6:a2:b3:69:f9:83:
                    3d:ea:b0:fa:d0:b9:81:f6:c5:58:c1:d5:8c:e8:64:
                    20:5c:74:04:01:02:ae:4c:78:46:54:c9:94:a2:0b:
                    73:d1:a4:50:16:88:6a:a9:52:35:73:cd:dc:44:8e:
                    b8:65:7a:99:7e:c2:20:88:7e:1a:62:ed:4c:b1:7b:
                    d8:23:ee:3a:0a:ac:b9:97:05:a2:e9:82:90:0d:ce:
                    43:62:86:d2:ae:a1:6b:6e:b7:51:2c:54:9d:1d:77:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:1D:62:B1:F0:5A:E5:96:63:60:18:DC:EF:A0:0E:4F:24:67:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.188.0.0/16
                  161.185.0.0/16
                  167.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:94:b1:94:2d:20:41:4f:ed:21:84:c3:60:9b:8c:85:19:a0:
         00:e2:f7:78:af:f5:cf:00:21:b6:05:ee:48:6a:db:f7:19:c1:
         af:34:ea:34:32:b3:df:2a:49:e2:25:91:1a:19:97:62:1d:11:
         57:fb:84:12:72:a3:fa:bf:ae:d9:ad:b8:8c:71:bc:0c:98:b1:
         3f:e8:2d:c1:42:da:65:58:63:16:32:1e:f3:a5:f0:b0:14:a0:
         83:d3:66:26:e7:e8:06:b5:55:47:a6:b7:be:3b:e6:8d:85:84:
         6d:ad:e7:94:db:14:24:8f:ab:52:ce:1d:c0:91:c5:d5:63:a5:
         62:8e:aa:22:bd:b2:e5:5e:d1:43:cc:be:d3:86:c5:45:aa:14:
         21:72:1b:ee:e5:4f:c7:87:29:74:e9:1c:c6:48:61:42:e1:10:
         20:67:e1:e0:94:31:92:34:74:e6:87:65:3e:9a:09:e5:07:93:
         4f:73:b6:a8:45:60:24:47:4e:49:25:12:a7:bf:fd:96:f3:ef:
         90:01:22:14:63:82:72:81:8e:58:90:dd:fb:7c:45:32:92:10:
         86:15:f5:bf:29:5b:21:ad:e9:25:1d:ba:a3:d4:eb:dc:aa:8c:
         78:ee:00:d6:1d:60:5a:ad:ed:71:47:49:b5:cd:9e:39:07:91:
         64:80:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:38 2024 by rpki-client on console-ams.rpki-client.org