Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa
File:                     8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa (raw, json)
Hash identifier:          11m+vZ3QQFE9XwQE6SnEAv0iyhYwQZTniDCiGGL5P/I=
Subject key identifier:   33:FB:7B:F8:20:65:71:54:16:93:00:8E:AA:F8:F5:A6:B7:21:91:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F5D3FAAA1BC3C2385A840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        162.151.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:5d:3f:aa:a1:bc:3c:23:85:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=1b143dc2-2b63-448a-917d-1d9cd6b91962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:28:80:f4:3c:01:b2:56:e3:e9:4e:14:96:
                    41:a8:8a:41:d6:ed:2b:08:f6:a8:19:ae:98:8a:18:
                    50:f8:de:2e:68:0b:8f:10:ab:cd:5b:f9:7d:34:8d:
                    cb:fb:3a:14:d7:e6:34:b9:f7:91:32:b1:f1:b6:d4:
                    aa:e3:32:ff:33:f4:50:af:9c:9f:97:ae:ea:37:5b:
                    bb:fd:b4:b8:a4:b1:79:9f:da:fc:25:74:8a:38:fd:
                    2a:84:f5:ea:ad:b0:f0:70:cb:b5:eb:a0:c0:32:52:
                    03:ce:2f:02:d4:02:c0:44:23:98:ea:92:64:a7:87:
                    52:66:18:52:56:08:11:47:de:57:24:92:43:e6:ed:
                    6c:03:6a:bb:b2:9d:8e:eb:4a:c1:69:f8:49:59:8f:
                    92:0b:8f:56:09:d0:ee:4d:62:3b:6a:4d:1d:05:06:
                    db:90:51:88:43:d8:38:5c:69:a1:c2:61:c7:6e:1e:
                    58:11:d1:92:0e:a6:e4:1a:ea:87:fe:31:6f:a3:62:
                    25:1a:d3:24:3c:ce:89:80:f7:c9:9b:ee:e9:27:07:
                    ac:ad:15:e2:19:87:20:40:2f:3d:37:8c:af:12:fa:
                    2b:bb:c8:50:c1:6e:1c:b8:ff:9f:65:3d:10:47:82:
                    3b:ab:90:c9:47:84:6c:27:1a:38:8f:a1:89:60:5c:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FB:7B:F8:20:65:71:54:16:93:00:8E:AA:F8:F5:A6:B7:21:91:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:aa:e9:5a:67:66:5c:6f:b1:42:11:de:2e:9b:67:55:2f:cf:
         dd:40:82:79:34:01:36:8e:0e:c6:96:7f:6f:94:bf:14:62:8c:
         49:6b:1f:ae:23:ea:ce:0e:f2:c8:18:e1:7d:6f:a6:b6:e1:0d:
         c3:a6:8a:f9:52:11:59:a2:46:cb:a9:fe:f9:73:eb:64:18:a3:
         36:c0:8b:cf:db:23:4e:5b:45:ba:c8:8c:86:2c:9e:29:17:1a:
         c5:05:ec:9c:70:9a:4d:19:c8:8a:2c:53:29:a5:2a:13:7c:fd:
         8e:f8:97:26:8c:ad:70:d9:06:39:21:3e:cc:fc:b5:15:1d:1f:
         e6:73:e3:d0:92:19:af:86:39:28:cc:12:32:e0:24:2b:ad:04:
         a6:a0:01:69:89:26:84:80:48:11:a6:27:d3:fa:eb:8e:be:b0:
         00:48:85:e8:d4:a0:9d:7f:ad:2e:12:43:85:60:2a:39:16:d6:
         d9:31:87:d6:14:cb:f6:1c:28:34:56:d7:01:de:70:39:1d:bb:
         63:d2:71:5a:99:31:7f:55:c1:90:63:ed:31:cd:bd:15:11:ba:
         ca:2a:14:c4:f3:0e:2d:17:88:6e:f3:0a:84:2c:46:a9:9b:33:
         df:d7:c7:12:f4:28:03:07:e5:6f:79:c7:1a:1a:39:fc:84:13:
         da:72:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:55 2024 by rpki-client on console-fra.rpki-client.org