Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea25b3c-19f3-395d-9359-3c08b263fcc4.roa
File:                     3ea25b3c-19f3-395d-9359-3c08b263fcc4.roa (raw, json)
Hash identifier:          l4H0UtIeVNAT6MUzUoDOT4IZLrMx6RryghRP5HJE9B8=
Subject key identifier:   D9:EC:63:55:75:6F:F1:A8:57:41:C3:D6:8D:FC:BF:8B:2F:D9:B0:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA2A3763359367960A50A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea25b3c-19f3-395d-9359-3c08b263fcc4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        162.151.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:2a:37:63:35:93:67:96:0a:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=78bcd1f2-b980-4ae0-9014-056e359ab5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:de:4f:81:c1:e4:5a:bf:54:11:58:c4:2c:
                    bc:98:c7:9a:ca:88:12:19:4a:19:8e:7e:2b:d6:4c:
                    f9:48:07:d0:f1:65:2d:87:9c:b3:c3:e4:1d:93:a5:
                    1d:f5:1e:dc:bc:cc:56:b0:bf:4f:c4:29:10:f1:96:
                    71:e8:69:d3:53:2e:22:72:74:72:7a:4f:97:aa:35:
                    4c:7c:ae:a8:35:23:88:c1:0f:02:95:53:40:04:c7:
                    af:71:4e:4f:fe:cf:0b:d1:5d:54:ec:72:16:54:43:
                    5f:25:89:6e:68:89:bf:8b:f0:ab:bb:4a:6c:c0:08:
                    29:e9:8b:2d:31:d3:98:46:32:f9:8a:01:5f:cd:32:
                    31:83:85:a4:15:60:03:e9:85:c9:a0:92:5f:11:29:
                    a6:5c:4c:50:14:d3:6a:84:43:3f:b1:5b:ba:1a:26:
                    a5:fc:2b:2c:12:1f:97:cd:57:5f:99:34:84:a5:d6:
                    68:3f:a4:4f:c5:46:2b:9f:2a:11:14:2e:11:86:15:
                    9a:54:4d:d6:d0:80:1f:6c:c2:f0:f0:51:84:ea:1d:
                    6a:5e:85:bc:a9:b0:dd:64:64:bc:3b:7a:ec:df:f5:
                    2b:ef:25:01:db:e2:fc:06:d6:1d:62:05:62:74:ca:
                    1a:fc:43:80:44:b9:f0:49:0d:5c:ae:5c:da:11:d7:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EC:63:55:75:6F:F1:A8:57:41:C3:D6:8D:FC:BF:8B:2F:D9:B0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea25b3c-19f3-395d-9359-3c08b263fcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:24:23:b2:6a:c7:1b:63:f4:fc:1f:f9:b4:c0:a6:38:95:
         34:49:33:c0:40:53:7d:61:96:8a:84:5d:61:5c:c9:54:4a:b0:
         0f:b0:bf:09:2c:39:3f:3c:d3:74:59:ab:37:79:09:42:4a:8f:
         f9:56:58:4b:ae:3c:2e:19:0a:9e:fa:e8:f0:98:b3:f1:c5:e1:
         c3:c1:46:26:97:64:12:40:b7:24:15:f4:91:43:06:08:2b:5b:
         a5:03:ee:d7:97:76:4a:ee:42:81:b3:e2:a9:2b:cb:ad:10:e3:
         e1:ad:1a:35:96:34:25:34:b8:81:7f:1d:c2:c2:c6:50:7e:7c:
         f9:49:36:6a:94:ee:d3:c7:0c:bf:54:93:f9:00:25:53:e4:2d:
         b1:44:af:f6:15:6d:d9:92:ea:1d:19:c7:91:3f:c6:6e:39:1e:
         a5:83:52:db:10:8e:c1:af:7e:86:ec:ff:57:94:a3:b6:fb:1e:
         4a:1c:0c:e9:fd:e5:7f:65:4b:6c:5e:01:e8:8f:79:f4:6c:74:
         1f:bb:12:cf:cb:ee:ec:a1:1d:2e:d0:37:fd:7b:8f:d3:79:ca:
         a9:99:47:d8:69:8b:bb:bf:bc:cd:2e:e1:46:50:dc:57:24:ac:
         85:e8:e9:36:ed:6c:b9:f2:7a:f9:3b:68:59:fb:7c:63:68:9c:
         53:c8:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:56:55 2024 by rpki-client on console-fra.rpki-client.org