Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa
File:                     186ed1c4-1800-342a-a23a-48f3f305d0cc.roa (raw, json)
Hash identifier:          86sNcmNs9XHLWqa03b0AzCbBqLlMZsusqztePIXy0js=
Subject key identifier:   3D:6D:7A:72:BD:F8:86:BF:68:E3:4A:D0:03:05:CE:2A:8B:12:8E:6C
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F43285847E35F7549E6F086753CE0A200
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     19905
IP address blocks:        158.222.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:75:49:e6:f0:86:75:3c:e0:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=335b4112-478f-4127-a5b8-2363cbe6af8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:2c:6a:f5:a5:25:e4:64:9b:27:4a:00:3d:
                    3d:f0:bf:49:d2:4a:ac:3d:8b:fc:89:14:61:62:37:
                    22:72:60:61:fa:2f:d1:79:be:8f:5a:30:d3:53:f1:
                    f4:a2:ba:26:b4:d3:3a:19:01:38:47:f8:0c:51:02:
                    b2:26:16:5b:67:f8:df:cd:5a:1c:d8:0b:98:50:09:
                    6b:98:3f:b0:22:ad:55:ed:5c:da:ed:c7:9b:e7:04:
                    6f:74:62:87:d9:7d:03:1a:43:fd:b8:f4:a5:e9:f2:
                    2e:6a:79:e3:b7:5c:82:e5:47:5e:bf:a0:5e:25:b2:
                    51:90:94:0a:12:a8:ec:65:fd:e5:3e:81:d1:0e:0a:
                    83:5c:cb:07:87:ea:6f:8b:cc:44:05:b7:dd:a5:59:
                    0a:47:5c:f0:f5:3a:ba:32:ea:d9:cb:e9:ef:c5:e2:
                    3b:b2:41:fd:ad:eb:d1:c9:d0:6b:e4:28:bf:a7:ff:
                    68:67:2f:ae:71:a4:7f:d7:34:6a:51:64:70:70:5a:
                    e5:8f:11:b0:48:fa:e5:0d:be:c5:e1:8a:fa:d5:38:
                    30:5f:45:72:bd:6a:b0:4a:dc:b9:38:03:9d:95:53:
                    c7:3a:6d:a4:cb:8b:f4:ec:1a:f1:c4:56:af:12:83:
                    f9:5c:99:32:ad:2e:fd:0f:e2:81:42:63:c7:93:ec:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6D:7A:72:BD:F8:86:BF:68:E3:4A:D0:03:05:CE:2A:8B:12:8E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:a8:2c:40:04:f9:dc:dd:65:7c:46:76:67:9a:16:14:84:
         45:8f:da:e8:a4:f0:88:f7:79:78:38:f3:84:2a:f5:95:52:d0:
         67:b6:b9:cd:fa:35:89:61:7e:bd:7f:6f:4f:a4:22:aa:d5:89:
         8a:d1:bd:4e:06:c7:62:e4:7f:08:64:3d:26:96:dd:69:f7:b6:
         7c:04:76:8b:1e:05:1d:fc:8a:61:5b:8e:b3:7d:67:50:5d:68:
         49:ab:d9:86:4a:5a:99:03:5e:b8:af:87:22:13:cd:0c:57:f7:
         08:56:90:a4:5f:be:cd:bf:46:7a:a8:5e:90:49:47:53:90:a9:
         50:93:b8:d5:64:89:05:1f:a0:46:b1:a1:97:2a:72:28:10:cd:
         ed:90:9a:c2:f5:a0:dd:ff:c4:4e:74:0a:ae:4c:f9:e7:04:d3:
         ba:8d:c0:27:34:8f:83:f9:d7:44:1d:f5:d2:fc:ff:20:5f:bc:
         09:0f:95:f2:fd:a0:d6:b0:1d:88:4f:38:6a:30:7d:9d:94:5f:
         33:fd:35:fc:32:25:5b:88:0f:c9:f8:d0:f6:3d:a9:63:f5:32:
         00:37:3c:b2:e9:3e:36:7b:af:80:e0:7e:63:11:ad:c4:75:38:
         cf:94:a3:f9:b0:cc:55:66:11:55:20:e1:26:fd:9f:6f:8c:26:
         ff:d0:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org