Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94a0101f-c701-3667-bf26-e61b2b4e13aa.roa
File:                     94a0101f-c701-3667-bf26-e61b2b4e13aa.roa (raw, json)
Hash identifier:          HjW9SaNE+vB7fYmUJLFceWREt/GiZ5ZZSDG3IgSjw9w=
Subject key identifier:   B4:41:24:5A:DC:12:47:10:8E:44:FC:80:0A:49:55:15:88:1A:CF:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEC0792BD6339B5A34E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94a0101f-c701-3667-bf26-e61b2b4e13aa.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ec:07:92:bd:63:39:b5:a3:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=cb96e377-d4fb-4251-be7f-9c31c37f9d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:61:7f:51:42:f6:f3:e9:f1:33:41:d6:c9:
                    f4:da:b6:2d:c9:df:e4:d4:0f:20:8c:40:b8:12:c4:
                    6f:24:b2:d1:af:9b:9f:53:d3:0e:08:3a:7c:6e:51:
                    81:d4:4d:7f:56:dc:6a:63:bd:88:93:ea:05:bd:cf:
                    0c:69:7e:aa:7c:2e:77:3e:f7:f3:a8:1f:36:8c:19:
                    db:34:32:cd:49:48:46:5e:ca:f7:7b:36:2b:e6:61:
                    98:c5:93:c7:26:dc:c8:35:c4:e5:49:6c:66:e5:34:
                    ca:7a:4a:14:67:2e:eb:a5:10:85:b7:e7:53:df:2b:
                    a6:cf:9f:31:63:61:14:46:28:d4:15:81:30:24:78:
                    64:24:c1:21:bb:ed:18:76:89:02:8e:03:b5:71:3a:
                    b9:4f:c8:90:aa:96:fa:bd:db:7a:7b:34:0d:4a:19:
                    b4:97:ea:ce:16:7f:a6:ff:9d:69:8e:22:16:bd:c1:
                    11:b1:be:e8:93:52:6f:f0:cc:30:9c:ff:9a:16:9c:
                    06:df:b0:14:49:4c:83:6b:0e:8c:ca:5c:f7:a2:a9:
                    c3:65:e9:24:28:05:31:d5:32:e8:37:37:60:d2:1f:
                    b3:c9:25:22:29:95:99:f9:90:a8:bf:f2:ef:c3:00:
                    0b:7c:aa:50:5b:46:cf:77:0c:5d:96:5b:0c:b9:96:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:24:5A:DC:12:47:10:8E:44:FC:80:0A:49:55:15:88:1A:CF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94a0101f-c701-3667-bf26-e61b2b4e13aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c3:f9:9a:d0:f5:96:3c:d1:99:50:cf:9a:18:60:ad:cb:a9:
         f2:0e:f8:28:7b:b8:46:ea:c6:0b:27:24:b9:f8:74:bf:4b:64:
         cb:04:ca:8c:0a:2a:50:fc:db:73:03:7c:96:41:41:f1:6b:23:
         77:23:14:ed:21:06:b9:5e:c8:b5:56:b1:f9:79:53:62:5a:a0:
         b5:7c:09:f4:49:86:0c:fe:a1:8d:c1:64:62:3b:dd:3c:0e:b2:
         42:70:a1:7f:10:c0:46:08:25:51:ae:e0:a1:27:33:f0:a0:46:
         58:27:5a:77:69:72:53:21:eb:1e:9d:f9:e5:ca:81:9d:d1:88:
         db:94:e7:38:35:14:38:21:db:aa:41:7d:5f:a0:b1:c4:5b:58:
         98:8a:bd:83:24:d6:b1:8e:87:ba:79:9c:d6:10:7f:8c:b7:bb:
         b1:6e:71:62:d8:ca:5b:db:04:84:9a:1b:f7:cb:76:52:e6:a0:
         57:dc:f8:72:0f:07:54:50:59:60:5a:7f:20:67:7d:8c:9f:2c:
         cb:12:53:e8:c6:fd:c2:a3:ca:dd:77:07:37:d6:cd:07:95:12:
         8a:cf:ca:0f:ec:4e:58:bc:b0:b4:4a:3c:84:97:3f:29:bb:99:
         20:02:80:65:15:d4:04:42:20:8d:bd:a9:f5:3d:43:17:9b:ac:
         99:4c:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org