Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa
File:                     c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json)
Hash identifier:          HrXG0rofIVM7MmCMUMtDZqex1DoXPHXUu1q/nZ4kkA4=
Subject key identifier:   6F:61:D0:7F:7C:76:CD:DE:85:A1:50:44:47:25:3A:45:F1:EA:8E:6C
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F432858479D76B87EBB0E0214F96F19A4
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     63199
IP address blocks:        148.153.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b8:7e:bb:0e:02:14:f9:6f:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=c340c495-e9b0-4e60-9b11-cc63b93fe072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:ca:d6:36:90:e5:38:d7:65:7a:46:96:60:
                    74:30:b4:d7:33:b1:d6:6e:c7:72:29:fc:59:db:54:
                    ad:c3:c6:e1:85:67:15:d3:9e:31:40:42:a8:d9:f0:
                    2d:28:38:55:ee:a1:44:43:5d:7e:45:95:f3:e9:7a:
                    73:0c:43:d1:2e:a0:bd:3c:c0:7b:99:a2:d4:16:dc:
                    0f:54:01:14:37:42:bf:fe:df:c9:61:e6:e3:0b:67:
                    fe:54:a6:c7:ec:9f:d3:1f:34:11:ad:c2:81:18:43:
                    88:e3:36:e8:00:57:3f:5e:0f:0a:2c:81:4b:9c:bc:
                    97:ef:94:dd:b7:eb:c8:78:76:6a:45:ed:64:12:72:
                    20:48:48:58:10:36:59:af:ae:9c:45:df:b4:92:bf:
                    f6:f9:d5:9d:ff:ae:4b:a5:79:87:21:87:78:94:aa:
                    12:72:0a:13:1b:ac:dc:1f:b0:51:75:7b:e1:82:e3:
                    71:0e:f7:da:b1:dc:4f:20:dc:39:39:6f:ca:88:cc:
                    e2:86:33:9a:33:86:16:9d:26:e7:d9:b0:74:1b:d3:
                    ce:94:68:d2:1d:c5:ee:ae:18:d6:3c:57:1e:a4:f4:
                    72:68:fd:c1:ea:c1:61:f8:e5:59:39:3a:3c:45:65:
                    0d:36:cc:b6:e1:55:de:2b:9f:a7:db:36:96:39:bc:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:61:D0:7F:7C:76:CD:DE:85:A1:50:44:47:25:3A:45:F1:EA:8E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:51:fb:66:cc:49:eb:87:d0:68:e4:b4:82:67:ff:fb:62:
         7d:c1:0b:19:c8:ff:f5:99:e7:a4:b9:bd:c2:d0:d5:bd:32:21:
         11:3e:41:20:00:35:3e:35:fa:83:41:85:06:a8:7c:cb:a1:b8:
         65:d0:8a:94:88:5c:8e:77:79:e9:15:35:0d:de:7b:3a:96:f5:
         2e:d2:7e:c2:ad:fb:c7:d9:d7:43:23:c5:66:5a:de:49:6a:c8:
         d5:03:ff:49:e5:ca:3d:a6:7f:9d:09:fc:47:ac:cd:27:98:86:
         63:03:24:ae:c9:63:16:99:92:e3:db:14:27:10:4d:79:56:6d:
         d3:95:34:3a:e3:44:e9:0f:c9:85:b5:2e:ad:2b:4e:e7:bb:e3:
         27:2a:f8:da:6d:7e:76:88:c9:47:e1:dd:bf:6c:05:e5:94:1f:
         2d:65:23:3c:d3:45:2d:80:19:65:08:89:c8:37:f8:77:fd:19:
         a0:0b:79:e2:11:77:26:11:7f:c0:aa:93:e3:fc:a4:16:c2:87:
         63:6a:0b:fa:e5:2b:f5:96:a9:0d:5c:59:79:90:16:78:f4:87:
         cd:0a:6b:f7:05:a6:1b:ad:36:8a:bf:20:cf:83:0e:9d:30:98:
         06:eb:24:a4:bd:37:8f:fc:92:4b:c3:9c:02:4f:7c:a7:75:9e:
         44:bb:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org