Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa
File:                     8f661662-189f-3150-a176-ffadb0f28abf.roa (raw, json)
Hash identifier:          1/MlGZpbmfkX58DtkPvNrWvePU9M02gwvdlv2hDmavw=
Subject key identifier:   4D:47:9F:A3:00:79:28:63:AB:4A:E9:1F:D4:18:DB:A7:97:58:E6:9A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847ED24B667CE9A7F53FE319200
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     54538
IP address blocks:        165.85.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b6:67:ce:9a:7f:53:fe:31:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=83fdb2ac-44e4-4fde-ae40-4df89bbf6f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:cd:d8:8e:33:e8:9f:4c:e0:30:56:71:bd:
                    bc:62:fe:d8:af:e6:83:c4:c2:4b:be:9d:ac:19:af:
                    d2:ed:4a:f4:8c:fd:d2:d6:19:b3:fa:52:0f:22:6c:
                    a0:e3:3b:fc:e8:a5:26:1c:b5:3a:7e:f8:62:21:da:
                    9c:44:ce:be:98:0f:f5:82:fc:b2:ce:d8:43:48:fa:
                    c4:0e:5f:d3:af:86:db:1b:ec:bf:90:7f:25:61:91:
                    4c:df:db:60:d1:c9:e5:2b:cc:d6:7d:83:95:d6:48:
                    f8:65:5e:58:53:62:fe:8a:f1:19:19:c1:2c:de:a6:
                    1c:16:41:00:28:8e:46:0f:2d:55:86:76:b9:0c:c5:
                    0d:92:d6:e9:53:a0:1c:eb:e5:dc:28:72:89:9c:9b:
                    67:c7:da:8e:0e:15:24:9c:72:0b:d5:32:ff:28:e6:
                    3d:f3:27:52:b3:d2:3f:cc:03:34:89:c4:27:39:a5:
                    58:3f:6f:ff:0f:9f:78:a9:ea:ce:b1:df:69:40:54:
                    4c:8f:94:8c:c8:b0:7c:b7:70:d4:9f:2c:cb:8d:ee:
                    94:2a:70:1d:0e:30:df:a6:0e:72:fa:5f:1c:fc:9d:
                    f5:74:61:32:c4:0c:ab:96:48:21:98:dd:d6:a9:d4:
                    f7:bd:07:92:5d:a7:07:01:f9:2c:39:2a:68:5b:94:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:47:9F:A3:00:79:28:63:AB:4A:E9:1F:D4:18:DB:A7:97:58:E6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:a9:a2:18:63:d2:4f:90:d3:aa:9d:09:bc:b1:0b:b8:3b:
         42:70:bf:c0:79:5d:c5:46:73:0b:48:30:b8:23:c4:50:b4:78:
         17:ab:24:fa:93:82:43:84:9b:e1:09:42:07:97:1c:74:8e:e7:
         3c:3d:64:f3:ff:8f:28:88:74:4a:e3:3a:54:3a:0d:b4:10:b1:
         ce:b0:d2:88:2e:55:a0:3f:a9:83:24:69:09:20:6e:12:39:1b:
         62:37:27:f9:22:98:44:12:14:b0:7a:c1:98:ff:ff:a9:25:2e:
         ea:16:ba:c2:9d:d0:79:96:8d:27:b1:1b:d7:4b:b0:ee:0f:e5:
         9a:a4:e3:40:1a:60:40:4f:4a:8c:df:60:e2:1d:31:76:08:6f:
         92:fa:5d:be:9d:25:6c:08:94:94:05:72:99:3a:0c:86:71:5e:
         97:31:58:da:b5:e8:a3:a0:ef:48:fa:a2:bb:fc:71:c0:02:78:
         ba:54:f3:69:e8:5a:8c:96:53:29:db:c6:b6:bd:70:11:5f:9c:
         5f:c6:76:b8:4e:e7:1d:a9:56:21:c2:08:0a:e7:f6:81:86:73:
         c4:f0:de:33:0c:24:54:c9:30:47:b1:08:02:60:58:7f:9f:7c:
         b0:13:b2:4d:a7:e0:35:ff:0d:54:7b:ec:71:fc:51:72:5e:48:
         eb:cf:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org