Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa
File:                     9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa (raw, json)
Hash identifier:          IIyq+zF59hlSfbRptWIxJG4xjmwDqsCIIvgwORC3b9U=
Subject key identifier:   BE:57:4D:2D:38:E2:70:DB:55:9C:69:99:EF:86:82:63:36:78:17:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E6B0A44BE057360819A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:6b:0a:44:be:05:73:60:81:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9f1f97c6-5d15-466c-985a-18a1b48c609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:66:e6:42:84:00:79:5e:5f:17:bd:de:e6:
                    08:3b:b8:3a:88:73:3e:aa:cd:19:73:06:d6:62:1a:
                    da:bd:67:25:b1:0e:b8:1c:27:86:9f:1e:91:dc:e1:
                    f1:1a:f7:89:86:97:4c:f3:27:4c:d3:38:40:3e:93:
                    d9:64:c6:37:b5:44:44:14:07:86:38:b2:15:34:2a:
                    86:4c:92:3e:2d:2f:4d:2c:a5:13:7d:26:ce:39:58:
                    b2:a3:3b:ff:cf:0b:09:b8:36:2c:53:29:fc:c6:6d:
                    03:37:6d:88:58:fe:fc:c0:a0:15:98:48:f4:b3:4c:
                    02:2f:32:68:09:ae:76:2c:3f:1c:ee:dd:79:32:3e:
                    7e:49:e7:f0:00:8f:a1:58:98:fb:b9:d0:76:c1:2a:
                    c9:89:bc:c5:be:cf:47:37:d8:04:4b:45:e8:a4:f3:
                    f1:02:77:85:b7:69:39:bd:86:70:fe:23:df:96:d8:
                    92:cc:22:f6:78:93:83:46:15:bb:64:8c:a0:da:17:
                    2e:3e:4e:3c:97:c7:26:c1:fc:cd:e2:c8:5b:b8:2d:
                    a5:2c:4b:79:2e:18:df:3d:ea:9c:85:3f:e1:64:97:
                    b2:d3:f5:b0:03:d5:26:79:6a:5e:b3:2e:96:5b:ba:
                    28:e6:70:b2:51:1b:81:1c:e1:35:b0:4a:31:6b:a8:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:4D:2D:38:E2:70:DB:55:9C:69:99:EF:86:82:63:36:78:17:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c3:bd:45:64:10:7d:14:7d:1f:2a:f2:89:2e:79:32:d1:14:
         f8:9b:5e:55:99:9d:11:89:5d:33:3a:c9:a3:7b:b7:f1:6a:25:
         1e:a2:35:06:b9:2c:a2:f5:f4:0c:11:d6:12:6b:38:cf:64:cc:
         e9:d9:cf:b8:1f:09:db:07:a8:51:40:a2:6c:eb:13:7a:c1:e8:
         d9:94:9d:80:10:3c:0c:b6:d8:93:42:ed:f5:02:a6:52:fa:64:
         cf:78:e1:8f:76:83:70:ee:b8:a2:81:e2:a6:93:ba:55:45:60:
         77:1b:b6:e1:6b:c0:ad:9c:23:f5:1d:bf:1e:53:63:61:22:e2:
         a2:f8:ee:bb:ca:3d:4c:44:c6:5b:88:ab:5d:8d:91:77:4a:9e:
         41:9a:18:45:5e:89:7e:73:22:a0:04:2d:44:0d:81:61:bd:9a:
         11:70:9e:50:72:9a:e1:e9:5e:28:81:fc:7e:d4:fb:23:cd:45:
         77:cd:55:87:7f:1d:45:b0:60:c9:1b:ff:01:a2:55:73:12:36:
         a4:77:83:29:af:29:8b:87:c7:ff:cf:46:ed:d8:98:0d:9e:48:
         ad:a1:ce:f9:e8:c5:51:43:a0:73:65:d5:91:a9:93:21:5f:6b:
         89:bd:3c:7c:e9:50:5e:10:6f:f5:c9:1b:1b:75:56:e9:82:27:
         d4:12:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org