Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08859171-fe64-32af-8c33-ef4e4818fabd.roa
File:                     08859171-fe64-32af-8c33-ef4e4818fabd.roa (raw, json)
Hash identifier:          Pb3+Sz6aMFVhBnYoaqS05Ok5AkdXLJuQSG8eh0OJZKI=
Subject key identifier:   BF:6C:96:02:B0:2A:D7:BF:49:17:1E:DC:E7:28:C3:3D:24:5A:BF:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F7524327E2C177C52DBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08859171-fe64-32af-8c33-ef4e4818fabd.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        162.151.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:75:24:32:7e:2c:17:7c:52:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=b18eaf88-9f10-4ec2-8771-3b0d3f930121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:fe:06:85:f9:4b:9c:17:ff:a3:17:3e:6c:
                    1e:10:e2:89:c8:44:3f:01:1a:32:e6:d9:10:f4:84:
                    d5:63:c3:18:e4:4e:52:93:3e:86:d4:21:c2:25:2f:
                    61:a4:b0:8b:ab:e6:cc:90:2d:15:50:b0:db:82:4d:
                    1b:fc:6f:33:4d:61:48:c7:d1:d5:62:ed:2e:d0:2b:
                    39:50:36:0b:ef:15:db:e2:ed:b4:1e:33:c6:8e:2a:
                    94:ba:30:2a:60:14:36:da:10:f7:bd:bf:cc:c3:86:
                    38:7d:a9:a3:51:5d:4b:a7:33:e9:55:7a:99:c4:66:
                    78:f0:11:ec:4e:d4:c8:cb:0d:67:3d:d6:f6:66:ba:
                    c1:db:d7:e2:c4:d5:bf:ad:30:cc:2e:79:5c:9e:92:
                    90:5f:d2:07:29:29:27:27:a6:01:17:32:2a:8e:9a:
                    56:1c:8d:26:26:0a:50:62:a7:90:d9:3e:cc:65:ac:
                    47:9e:8f:6c:88:f3:b8:71:d5:5a:31:9f:9b:bd:b1:
                    a3:df:89:4b:61:65:39:b3:fb:2e:3a:a7:51:84:50:
                    e7:95:84:50:43:8d:dd:c9:06:9a:40:e6:6a:36:a8:
                    98:ee:f5:69:4c:b9:fc:5d:41:44:3b:89:1d:4d:f6:
                    66:b7:af:34:a1:cc:b8:28:c4:6d:62:09:69:a8:f5:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6C:96:02:B0:2A:D7:BF:49:17:1E:DC:E7:28:C3:3D:24:5A:BF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08859171-fe64-32af-8c33-ef4e4818fabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:20:d8:cb:7e:4c:10:b9:b9:06:07:55:f9:68:ce:22:d9:
         e0:29:ac:15:25:f2:7a:1f:84:5d:dc:6d:6d:d6:5e:c2:5b:57:
         5a:bb:64:b3:d1:07:ac:77:0e:08:f6:97:ce:dd:f6:b9:21:08:
         2e:25:9c:23:76:df:55:c5:b5:48:4d:e1:98:78:c7:99:7b:f1:
         f4:fd:5f:4f:14:2f:74:c1:0c:8e:71:34:9e:f1:d0:de:87:ee:
         d4:5a:ec:74:99:9b:c6:18:b9:ff:c0:5a:8f:fb:eb:1c:19:e0:
         1c:97:3d:a4:92:57:38:da:71:6b:c2:ac:8f:19:96:7f:f8:08:
         d7:12:47:91:5f:cf:2f:a4:88:41:30:c7:64:01:e8:1e:75:cc:
         bd:5d:01:a8:c8:e7:c4:52:d3:06:bb:36:20:5b:d0:41:62:ba:
         7c:f9:1e:b1:32:7f:ac:e3:4b:ab:ab:01:9c:8b:03:ed:c7:74:
         a1:b3:75:b5:53:9d:17:53:f0:4d:2a:de:5e:d6:4f:16:7f:59:
         91:95:ec:fc:65:af:93:aa:92:e9:c9:00:2b:f2:45:b5:72:6a:
         b5:a3:41:37:20:da:ab:11:41:81:3d:78:55:ff:ab:c3:17:85:
         b7:8e:10:73:38:d5:ba:70:8b:4c:87:df:e9:18:27:38:6d:ce:
         b1:77:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:56:52 2024 by rpki-client on console-fra.rpki-client.org