Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
File:                     8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa (raw, json)
Hash identifier:          EYP/4BkVGHQ/m0y8oYiWqbzLQlUsXdy0xVcqC+1oc0A=
Subject key identifier:   C9:95:69:79:00:1B:CA:19:5E:4A:02:F7:75:89:94:30:9A:B6:4E:E7
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F4328584793B113106F23092C6BB28450
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        157.188.0.0/16 maxlen: 24
                          161.185.0.0/16 maxlen: 24
                          167.153.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:13:10:6f:23:09:2c:6b:b2:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=5109a0ad-4f24-4d31-8e85-cb36a78764f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:c8:0f:06:32:a2:e9:64:a0:7b:bd:66:20:
                    47:f6:a4:ab:d5:87:34:e1:2a:c3:fe:f7:88:1a:85:
                    ff:9c:77:18:ee:e3:4f:24:cf:27:e8:6b:a0:0f:6c:
                    ae:08:01:bd:8a:2e:0d:80:28:29:b1:03:c5:7f:2d:
                    78:e6:1c:52:b2:64:21:d0:58:72:e0:b3:8b:99:f9:
                    c4:18:4c:10:16:53:7e:1c:ea:7d:05:ae:68:a1:81:
                    24:74:bc:60:d9:12:8a:a0:19:62:63:f6:c7:d3:2f:
                    55:55:a4:79:f9:53:50:48:17:fd:34:13:da:d9:ec:
                    9b:55:38:de:85:dc:b9:69:54:d5:92:de:ef:c4:0e:
                    56:cf:ab:f9:79:81:ba:20:53:46:5d:42:22:79:99:
                    83:47:06:c3:ef:3d:6d:6d:56:99:17:67:44:78:00:
                    d4:7b:df:9a:ae:69:da:c7:a2:86:9f:11:57:49:69:
                    88:a0:3c:a6:1e:8a:2c:b6:b0:e9:d5:f6:9a:35:bc:
                    37:66:f5:ec:fd:8c:df:c8:f4:90:ff:f5:b1:a2:69:
                    7d:14:fe:a6:92:17:16:47:7c:2b:7d:2e:e0:01:25:
                    41:02:85:44:da:16:ed:06:6e:65:d7:1c:ac:aa:ca:
                    d6:fb:2a:89:1d:4d:cd:c2:7f:58:91:f3:0f:58:22:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:69:79:00:1B:CA:19:5E:4A:02:F7:75:89:94:30:9A:B6:4E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.188.0.0/16
                  161.185.0.0/16
                  167.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:8e:88:65:c4:46:fb:2f:71:2e:b0:a5:24:7c:f6:c3:33:
         26:a8:df:40:70:3c:48:d3:8b:0a:ae:c4:8b:9e:75:cf:ab:19:
         bb:d3:29:3d:6d:ca:6a:f7:b4:c5:c4:e4:ed:78:b9:45:bd:f3:
         f8:db:5b:65:a7:50:fa:e5:9b:2b:ed:e5:05:8f:98:03:2b:dc:
         fe:73:19:85:5b:a7:b7:a3:9a:6a:9e:99:0e:02:ba:77:77:08:
         37:a9:08:d8:0f:b5:68:28:f6:fc:60:b7:59:89:4b:fe:86:1e:
         07:13:ea:63:42:a6:33:22:06:f5:4f:88:cb:b6:51:00:e8:a3:
         8a:27:ae:94:15:08:68:70:83:12:b9:32:52:65:e6:83:73:8f:
         73:b9:4e:ad:cb:95:bc:27:7e:86:33:2f:2a:2c:76:12:45:42:
         de:10:a4:9a:4a:13:5c:45:e4:86:f8:79:c7:13:dc:2e:8a:34:
         3d:99:40:d2:03:e4:e3:11:3a:89:76:d4:c6:91:09:4e:96:30:
         97:db:48:54:8e:40:dc:f8:58:bc:20:3e:d9:d6:f9:86:9e:d1:
         78:b1:21:29:6f:fe:c9:8f:f4:5c:da:69:9a:b1:db:ed:bc:dc:
         1e:51:eb:a6:92:09:f8:44:7b:0c:94:51:0b:95:24:a6:6a:aa:
         2a:6a:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:44 2024 by rpki-client on console-fra.rpki-client.org