Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa
File:                     eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa (raw, json)
Hash identifier:          U+haCg/qvlnv890fcWPIvTRgHMtF9ZNpgoCr34DirwU=
Subject key identifier:   16:80:D7:7C:BE:4C:43:F6:86:F1:69:30:5A:3A:A7:4E:AC:A4:57:D8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E6B2F1875456ACD983D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:6b:2f:18:75:45:6a:cd:98:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a327fb0a-345d-4901-b21b-6845bc4ff7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:cd:d8:e0:db:19:73:b1:fa:2a:e4:e6:bb:
                    33:a2:ab:25:f8:e7:67:24:91:fa:dc:51:9d:65:63:
                    9a:7b:32:65:74:85:08:27:c4:d1:ef:fd:bd:35:e6:
                    a4:7b:42:45:ee:86:d1:ff:3a:1b:fa:96:6a:ee:f2:
                    4e:df:46:53:89:41:5a:c5:fc:55:01:21:83:fc:6b:
                    52:a3:34:9a:ec:43:44:3a:b1:10:49:bc:01:5b:aa:
                    72:6d:6e:6a:27:77:56:e1:d5:5b:11:e5:a0:37:35:
                    ba:14:33:45:33:a1:f2:03:b7:e5:e8:a1:53:ef:0a:
                    72:08:23:cd:11:46:c9:d7:dc:54:ca:9d:f8:b1:50:
                    d8:2b:0c:98:00:77:8b:ef:63:4c:d4:c0:63:df:40:
                    e8:7b:ad:bb:ae:5c:96:2a:4d:7d:88:51:bf:39:26:
                    ad:a0:07:d3:33:c8:de:41:cc:5e:fd:95:01:64:61:
                    c6:6d:b5:ff:ac:08:12:5a:6c:6b:ac:f8:21:95:02:
                    ff:99:07:27:61:04:db:f7:83:6f:b5:11:e7:c2:b1:
                    f4:ff:f3:eb:09:d7:be:1f:b9:c6:37:f3:f8:b5:04:
                    b3:cd:7d:7a:06:54:39:a9:fd:bc:b0:61:60:16:29:
                    6a:6f:ed:60:92:07:6c:96:eb:5c:b0:07:66:05:6f:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:D7:7C:BE:4C:43:F6:86:F1:69:30:5A:3A:A7:4E:AC:A4:57:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:2a:d1:4b:75:ce:ca:59:29:53:d4:ba:82:b0:5f:e0:93:
         9c:05:c0:91:ae:65:0e:1c:d9:2d:b9:1d:69:b9:51:85:b5:d8:
         42:18:48:ef:3c:3b:39:47:1a:e9:ac:99:ce:fd:94:53:47:7e:
         1a:09:73:d8:38:e7:db:7a:b6:1c:b7:ff:65:a3:05:cb:30:64:
         56:1e:02:99:c8:a2:aa:1b:6e:ce:81:64:e8:40:5f:21:1c:87:
         0d:a5:1e:76:17:07:9a:de:e5:05:d7:d1:c9:24:25:52:c9:78:
         fc:20:93:be:cb:2c:41:6f:a8:d6:cd:c2:ab:d3:d3:2b:1e:e4:
         38:aa:c5:55:83:7e:c4:6c:c1:69:49:90:0b:67:07:a9:84:23:
         cb:6b:4b:58:bb:6e:6a:4a:05:f2:b2:81:c5:06:cd:9e:5c:50:
         dc:4f:1e:13:99:bf:52:8d:37:0b:5c:53:22:e7:67:f6:7c:29:
         d7:ed:91:74:d1:8c:19:0b:38:4d:35:ce:30:c9:77:c7:1c:c0:
         9e:52:17:5f:ac:c2:67:c6:d2:dc:4d:46:18:bb:d9:93:a4:71:
         25:59:82:56:b2:a4:b5:f7:e4:b5:d6:05:38:fd:1c:5b:f4:ab:
         b6:96:4e:72:35:a1:ff:d9:7a:b3:c1:94:92:dd:87:83:bc:5d:
         36:78:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org