Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/246df86b-8ce7-37f9-a303-c74cbc37e31f.roa
File:                     246df86b-8ce7-37f9-a303-c74cbc37e31f.roa (raw, json)
Hash identifier:          ZR7BdkUQ9eubKyF7SQJO2QH7TFkdHJ3bDnpquKswF78=
Subject key identifier:   64:B8:94:74:62:79:FB:07:F5:B1:9C:17:FD:91:B1:28:E7:10:5C:50
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858472405CC85BD3C3CA9373D8B80
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/246df86b-8ce7-37f9-a303-c74cbc37e31f.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        192.161.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:cc:85:bd:3c:3c:a9:37:3d:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=5bb6a652-c994-4df5-b950-63ff04621937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:7e:68:fa:5a:e6:38:58:19:16:28:dd:c3:
                    c8:f9:ca:a0:08:ec:99:a3:25:92:65:25:de:04:73:
                    d2:83:ec:8e:f1:ab:56:b1:79:9d:e2:de:19:36:c7:
                    e3:15:0f:7b:69:bd:fb:4d:37:6a:71:bf:dd:c4:01:
                    9b:20:d5:01:6c:ce:6e:2e:a7:89:f6:cc:b2:79:4b:
                    aa:53:13:a4:75:fe:22:80:c1:0b:89:07:19:c4:76:
                    5d:28:52:07:16:60:c0:a1:33:f0:15:2b:b9:2f:39:
                    f2:17:fa:b4:4d:e6:23:ae:c8:54:64:4d:ff:03:13:
                    2b:77:28:db:43:cd:bc:23:e8:e0:55:e7:35:ca:b5:
                    a0:c9:e4:e6:24:60:d5:20:9c:1f:90:49:56:5e:d1:
                    9f:33:58:3a:bd:20:83:10:b7:91:d3:8e:2e:b6:90:
                    80:1d:27:77:cd:59:db:9e:a7:42:26:4e:03:d8:0f:
                    70:65:d2:0c:f1:60:96:4f:2f:ae:90:db:37:e2:8b:
                    33:ef:90:71:3a:e6:89:c9:dd:46:5b:e0:71:48:7b:
                    fa:81:3b:36:6f:d3:ec:68:01:cb:35:10:52:b9:3a:
                    cc:61:61:1d:84:a2:f2:f2:10:7f:18:63:e1:3a:db:
                    af:76:3e:92:80:f5:14:d3:6d:de:c1:af:1d:af:a7:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:94:74:62:79:FB:07:F5:B1:9C:17:FD:91:B1:28:E7:10:5C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/246df86b-8ce7-37f9-a303-c74cbc37e31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:67:27:fb:a4:42:53:cf:a8:74:6a:a2:91:60:ac:7d:1f:04:
         32:65:54:c7:ed:53:25:b0:f6:09:0c:a0:40:52:a2:e8:5c:5b:
         49:ad:7c:a5:eb:07:98:b0:cf:8e:7e:cc:18:ca:73:f5:e0:7b:
         53:76:ab:7d:c6:93:e8:3e:b3:1e:84:43:ed:f7:bb:1f:84:ed:
         33:9e:3c:2f:8c:51:08:f6:e3:9b:a3:7f:47:cd:9e:45:ce:9d:
         60:41:d6:0c:46:bb:8e:ae:bd:87:ed:6f:ab:ff:22:70:cf:ef:
         7b:e8:f7:d8:d0:7f:74:99:56:fa:58:53:99:e2:a2:c0:f5:22:
         20:3e:5f:7c:f4:5f:7c:a6:60:fb:20:4e:12:28:c7:92:36:e8:
         8b:28:4b:9c:12:e5:ef:e1:8e:bd:c7:24:55:b1:e6:72:84:f0:
         df:91:75:4a:35:81:33:e6:49:dc:f8:fc:4f:29:9f:08:40:4c:
         f5:52:b1:41:66:46:ce:73:3a:4b:07:90:2a:08:b9:ec:a9:c6:
         29:16:b7:44:a2:44:e9:ef:12:66:f8:aa:6c:26:c6:27:28:99:
         16:73:8f:5e:00:e1:34:d2:92:81:e3:a9:d5:75:d1:b2:b0:0a:
         5d:1f:0d:49:29:7d:ff:0c:37:18:7a:77:a8:a6:b7:43:d9:7a:
         e1:da:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:34:06 2024 by rpki-client on console-ams.rpki-client.org