Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa
File:                     96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa (raw, json)
Hash identifier:          YVekizsks5hJABH7K8B5gKnYp4mEpTfWOo0Na+LVPxQ=
Subject key identifier:   D9:0C:FF:F0:75:FF:5E:AC:71:E5:46:DC:B7:85:1D:EA:BB:23:DE:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEB0C0E4FFB031FCD2B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:eb:0c:0e:4f:fb:03:1f:cd:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=871551f8-175e-44a5-8787-4d5207bbe15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:b4:c8:b8:67:18:22:20:d5:d9:b1:d9:4c:
                    be:59:02:f3:94:a5:fc:92:be:91:1d:d5:79:b8:fd:
                    28:b7:8a:e0:49:2e:90:9f:30:0d:e1:8b:a9:11:a6:
                    17:88:a5:d3:ea:09:39:1c:88:56:68:65:99:dd:98:
                    85:96:76:ea:ee:d2:f9:13:e6:20:92:be:6a:e2:8d:
                    ec:1b:6f:66:f4:ab:f3:cd:8e:ee:f1:7e:3b:04:5e:
                    cc:2b:62:70:f6:85:28:46:a8:25:34:d4:4c:72:80:
                    fc:78:2b:b1:69:99:11:e4:44:d9:1a:83:dd:c0:2a:
                    eb:6b:61:6c:c3:7f:e5:ea:d4:b1:37:54:10:21:2a:
                    ed:90:4c:8d:5b:76:4b:db:32:be:0e:e6:8a:c5:0a:
                    98:84:a6:7a:54:07:09:00:fb:a0:d4:77:65:fd:55:
                    e1:76:88:01:6d:89:07:0b:a4:b9:2e:c0:19:94:b8:
                    83:99:2b:62:f3:ae:01:d9:87:ab:d2:ee:fa:54:a4:
                    9e:e7:de:f6:57:d2:59:aa:20:f4:cb:48:3d:8f:71:
                    d6:de:a7:b1:18:e2:e7:fa:5f:ee:74:52:56:51:ce:
                    e5:b4:d7:b9:2f:07:2f:91:2b:15:6b:ad:3c:07:63:
                    87:bf:c9:6a:91:29:0c:43:54:6d:35:70:c2:cc:01:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0C:FF:F0:75:FF:5E:AC:71:E5:46:DC:B7:85:1D:EA:BB:23:DE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:66:5c:45:b2:a0:70:6c:fa:09:15:22:9a:62:4a:a0:c9:
         62:23:5c:37:9c:4f:c2:68:32:fc:40:f1:b0:9c:ea:4c:0e:95:
         a5:7b:20:1d:c7:18:35:cd:cb:e3:20:8f:25:a0:b3:68:8a:29:
         dc:54:2b:66:34:f0:29:e8:d8:8f:85:27:1b:46:d2:9f:af:1c:
         2b:55:7f:db:c6:a5:c3:44:91:c4:43:33:93:5a:da:97:74:c7:
         e7:df:82:e0:83:97:6e:b3:ab:55:d7:13:f2:21:b3:11:f1:80:
         0f:29:ab:90:00:36:93:90:e5:1e:3e:1d:2c:8b:25:48:0b:11:
         56:4e:03:f0:11:ac:d8:86:b2:d4:e1:35:aa:12:6e:3f:d0:ff:
         52:f6:6f:21:5f:30:06:23:a8:7a:07:4e:52:77:8b:9e:ce:d3:
         8b:fe:2f:a0:87:91:49:21:f9:38:98:73:40:1c:42:3b:c8:dd:
         3c:f8:ae:7e:b4:fa:b7:b5:a6:65:28:8e:45:66:2f:a3:73:98:
         2e:69:d1:5b:40:9d:d9:e0:97:7a:95:f5:6b:75:8a:23:be:08:
         5e:8e:66:d0:18:26:93:ba:73:13:f0:09:c6:2a:3f:0d:7b:21:
         51:36:2a:27:9d:bc:4f:6a:d6:a0:e5:54:ab:c1:97:e8:7e:e7:
         61:3b:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org