Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
File:                     f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json)
Hash identifier:          Zgs2K+IE9B2aBaSSvJLH+/zLeKwP1FNcY1lVoP6clX4=
Subject key identifier:   8A:24:CF:06:8D:1D:33:E2:B0:A6:B6:FB:5C:F8:A2:7D:2B:44:08:BC
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F43285847F2BA36AC2980B162266CA700
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     18615
IP address blocks:        147.160.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:36:ac:29:80:b1:62:26:6c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=548a386a-cbc4-4850-b946-0fb06eab1cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b9:35:9d:61:23:a0:d3:0b:ad:e2:8e:32:10:
                    df:68:95:e8:b9:9a:d8:59:2d:84:7c:cf:30:4c:78:
                    a4:c9:12:d4:7a:d0:39:76:b8:e7:ec:f3:8d:ae:59:
                    2d:f4:ac:cd:85:5b:58:a0:00:c3:4f:b1:c8:c2:ca:
                    76:2e:bb:08:d1:a1:dc:0c:db:c4:0b:d4:96:d5:75:
                    e5:70:51:57:55:77:24:43:f9:1a:07:09:ae:26:3b:
                    c8:13:b5:c4:37:55:6c:66:e4:76:ae:a9:a5:b8:0f:
                    36:4b:6e:4d:19:27:5b:8a:98:d4:84:af:6c:61:5f:
                    1b:36:77:33:7e:5a:9e:20:03:91:3c:ec:f0:0e:f1:
                    a4:c8:f6:ad:94:47:5c:82:a8:45:03:48:b3:89:d0:
                    f2:72:ea:5f:9b:e3:96:be:dc:c6:e6:21:af:e1:7a:
                    78:e2:ab:93:c1:05:e7:f1:7c:01:ad:b1:73:61:f9:
                    07:c1:f9:8a:30:a4:f6:90:8c:f9:0a:06:c4:94:a0:
                    5f:b7:d4:fe:72:a7:a6:0c:ad:84:c5:d8:2f:cd:2b:
                    1c:6f:3b:3f:65:ed:23:e8:2a:2a:a9:98:03:80:1f:
                    00:3d:9f:8d:f7:12:1d:8f:43:29:75:16:44:84:ca:
                    39:9e:05:7f:99:44:2c:27:49:a8:b9:d1:54:63:c6:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:CF:06:8D:1D:33:E2:B0:A6:B6:FB:5C:F8:A2:7D:2B:44:08:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:19:8b:bd:ba:fe:ce:d0:71:3a:b5:10:76:78:12:29:9d:
         97:4b:a6:8e:88:0c:2a:1c:21:af:bc:8a:d0:7c:36:7b:85:45:
         46:61:21:08:b7:4c:35:47:7b:4f:05:c9:80:d1:5b:4c:80:c7:
         99:40:ad:51:41:27:f5:35:5d:73:25:44:1a:8e:15:8d:8a:77:
         19:06:0b:f3:1d:a0:f8:a1:cf:4e:e2:22:7d:77:0a:43:46:91:
         4c:85:12:4f:90:82:3a:ce:ed:fa:2a:76:cc:84:01:f7:69:ff:
         1b:b5:67:27:04:71:d0:d8:c4:7c:18:f0:57:b7:28:20:64:91:
         34:a8:9d:14:87:2e:04:0c:00:d1:57:60:34:f4:f8:5f:15:16:
         5d:9a:7c:2e:21:88:1f:23:39:55:20:c8:b8:d1:a7:07:f2:7a:
         c3:5f:2e:04:d0:9b:15:c9:54:df:9a:16:a3:45:d3:2a:ae:22:
         0d:5a:b9:79:dd:62:a4:66:33:87:1c:f6:43:40:6e:6e:c7:0f:
         1b:93:b3:27:35:49:2e:02:dc:63:fc:3d:f5:3a:b1:c6:8e:72:
         01:f5:5f:ce:1a:6b:81:c0:88:e1:92:c2:9b:0e:41:d2:be:a5:
         74:1e:25:70:4e:92:40:7e:ad:5e:c1:36:2b:27:e6:1a:82:fe:
         49:00:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org