Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/483b9bc7-4216-3731-8c80-05b619327882.roa
File:                     483b9bc7-4216-3731-8c80-05b619327882.roa (raw, json)
Hash identifier:          790CsrQx7VGPJ0Jv19ad4t/QBC1En7KoNufyGQthNCo=
Subject key identifier:   22:84:CC:52:26:C0:1C:13:88:CA:80:9F:DD:F2:87:E0:C8:1E:AD:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2DA38CA4275EE166C080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/483b9bc7-4216-3731-8c80-05b619327882.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2d:a3:8c:a4:27:5e:e1:66:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a564533c-dcb7-452a-aa18-ef9bf8caf2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:a1:19:a1:46:58:0e:7b:a8:75:5d:32:3a:
                    ba:9c:2e:f9:c1:65:e0:66:0a:05:e4:cd:1f:36:19:
                    72:e3:07:31:b6:62:a8:59:2f:65:9e:e3:13:4c:b1:
                    ae:5c:31:d9:57:d9:d9:11:73:33:c6:f1:80:8b:78:
                    eb:d8:b1:46:07:ac:a0:e9:5d:1d:3d:15:92:fd:a0:
                    7b:1f:f6:83:d1:2a:e0:03:2a:12:c9:fc:68:a7:8e:
                    72:64:d5:ed:97:e7:72:dc:ca:b1:97:f4:bc:12:be:
                    6b:8a:5d:f9:dc:8e:c1:05:1e:9a:54:98:d1:74:c3:
                    28:02:b4:16:27:a2:22:89:0b:7f:5e:30:e2:ed:39:
                    de:d3:08:46:6d:12:fa:5e:20:ce:57:7a:54:2e:93:
                    47:4b:55:1b:15:21:ce:d4:51:79:23:b4:d5:27:36:
                    27:d0:fd:1d:02:e3:ff:52:44:ec:22:ac:3e:fa:83:
                    69:4d:39:8e:e2:a9:eb:b6:f5:66:1b:b1:57:5d:57:
                    f9:f6:b0:60:63:fd:4a:fc:f5:de:87:60:f9:b0:62:
                    a4:e1:a2:49:2f:65:ce:d0:ef:e2:3e:21:83:db:b6:
                    ff:66:0c:48:60:9a:8e:7e:f1:5a:1b:08:47:93:9a:
                    11:36:31:31:37:43:a2:d5:46:a3:03:28:96:18:01:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:84:CC:52:26:C0:1C:13:88:CA:80:9F:DD:F2:87:E0:C8:1E:AD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/483b9bc7-4216-3731-8c80-05b619327882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:46:36:9f:28:71:bf:6b:e7:bd:3b:28:df:3a:54:91:95:7a:
         2e:c3:44:56:da:f2:02:49:bb:bd:cc:e5:58:80:0a:f7:e1:e2:
         56:fa:de:83:38:06:8e:ba:b1:6b:6c:b3:7a:c3:5a:80:2c:9b:
         03:d0:8b:d2:98:09:aa:03:c6:0f:22:57:c5:0d:1a:53:be:90:
         94:f3:31:16:50:76:46:6c:2e:34:b6:bb:8d:32:de:9f:4a:10:
         a6:35:3d:b5:cd:cf:60:3b:84:5b:49:42:6b:2d:bd:cd:00:b9:
         d8:98:26:86:9d:b7:e4:30:74:81:e3:32:bf:ec:3e:41:33:eb:
         9e:a0:7e:0a:57:52:bf:a1:04:38:a2:53:0d:65:e3:9b:0c:36:
         ac:33:a6:2a:2f:d0:4d:6b:4e:3d:e8:6b:c2:cf:69:d8:f3:b8:
         72:54:cb:f7:84:6f:73:4f:9f:6b:9f:4e:ea:b1:83:43:f0:4f:
         ab:52:fb:c9:11:28:3e:4c:8a:fa:7a:e4:7f:83:f4:1e:d6:87:
         af:d0:57:31:cf:bf:a1:1f:a2:07:99:d4:36:a0:17:8d:e5:2d:
         b5:68:98:0d:de:d6:3d:64:db:4b:67:45:0e:37:4c:5a:7a:51:
         7b:46:fb:2e:6c:24:12:b8:7b:a4:8d:d6:bc:40:09:d2:73:ed:
         a2:63:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:40 2024 by rpki-client on console-ams.rpki-client.org