Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa
File:                     72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa (raw, json)
Hash identifier:          iSS5HHoeZKES2289Aaq31pXDzwFNpdAEdgMnt3/nVr0=
Subject key identifier:   E3:DA:5D:76:E9:81:F3:77:DA:4C:20:2B:6D:AD:B1:25:1E:67:73:D8
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E60B3E2E527CE288DC44800
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:b3:e2:e5:27:ce:28:8d:c4:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=a76aaa07-38df-4109-a469-4aedde9d0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:a3:35:ee:5e:d6:ef:dd:ae:1e:58:cb:b2:
                    f4:0e:69:9a:82:43:78:0a:9f:e1:8c:bd:a8:21:33:
                    0b:05:52:b8:c0:58:ce:fb:6a:e8:02:b5:67:f2:94:
                    5e:f7:b8:1a:14:1f:a0:a4:31:73:8a:40:33:6d:36:
                    d0:32:e6:0f:f6:9e:fb:72:7d:d1:06:c2:c6:ea:60:
                    26:96:6a:5a:19:2a:20:38:4d:60:2b:85:81:5c:0a:
                    b9:e6:6c:ea:91:43:b7:fa:c2:0b:da:7e:81:92:63:
                    d8:35:a7:5d:93:e7:5b:98:fb:c3:39:83:ab:6d:9d:
                    cc:e1:78:e1:40:0b:c4:eb:61:18:9e:50:46:e7:a8:
                    02:ca:7f:fe:e1:3c:95:04:01:58:a4:80:69:a2:50:
                    8e:1d:ae:46:1e:34:6e:ee:77:73:98:c5:88:e6:da:
                    88:b6:c6:da:77:dd:4d:7f:e0:d4:66:ea:d5:c5:06:
                    aa:74:89:bf:b1:ad:91:c2:bd:8e:76:e1:18:be:f1:
                    e8:51:e5:d6:57:2e:4e:60:5e:70:12:22:5c:c0:94:
                    0c:a3:62:78:ac:68:ef:91:9d:ef:98:7d:f9:ee:c9:
                    db:15:2b:cc:26:6f:33:de:88:e9:a0:01:04:bc:1f:
                    96:1d:5f:96:55:f1:fa:66:3b:2b:2a:d6:47:03:e6:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:5D:76:E9:81:F3:77:DA:4C:20:2B:6D:AD:B1:25:1E:67:73:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ca:56:b4:df:48:3a:69:60:97:0d:80:d9:45:d6:53:a8:20:
         28:4f:cd:38:c3:b2:28:1a:d7:51:90:d2:8b:cd:bd:d0:f7:62:
         2f:19:9a:d0:d8:fb:2f:9f:8f:0f:6a:de:19:10:eb:bf:cc:5a:
         a6:d2:97:ab:35:26:08:a3:88:44:f2:a7:49:41:68:60:a9:a7:
         d4:b0:9c:0e:11:9a:8d:bb:7e:62:df:5f:af:8b:39:86:24:a5:
         38:fc:a3:8b:f4:8b:17:0c:e7:e3:23:9d:9a:aa:3e:13:9b:1b:
         27:aa:96:d7:bd:49:84:52:72:72:05:46:fd:5d:b6:a7:78:6f:
         8b:75:a4:06:20:f0:45:89:a5:0e:e9:ef:f0:16:dd:61:66:1f:
         b7:a8:94:1f:15:3e:05:41:2c:1a:44:82:c9:45:7d:fb:83:f0:
         ad:3c:35:b7:6b:50:f9:9b:87:3b:8e:1e:70:01:79:b2:6b:da:
         0c:96:93:57:73:83:d7:31:d2:15:5b:41:10:6d:95:66:0f:1f:
         07:56:1d:06:5f:96:da:2d:4b:05:ad:61:66:6f:04:af:5b:af:
         77:db:8e:64:c6:5b:73:76:44:0f:47:dc:ee:27:e0:7f:3a:75:
         c6:05:71:78:00:2c:a4:e4:bb:95:da:8c:1f:a3:9b:7e:41:a3:
         95:52:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:28 2024 by rpki-client on console-ams.rpki-client.org