Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe10dfde-46df-3365-8e74-cad177c1946d.roa
File:                     fe10dfde-46df-3365-8e74-cad177c1946d.roa (raw, json)
Hash identifier:          34HRKJP6k1bgzduUvdDbz1rX8ApUXSEiUHiKAN2QwA8=
Subject key identifier:   04:F5:DF:58:83:48:DA:02:6C:FE:2D:88:C1:0B:21:1E:DF:56:62:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB773D36C0D972A5E212F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe10dfde-46df-3365-8e74-cad177c1946d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22258
IP address blocks:        162.148.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:77:3d:36:c0:d9:72:a5:e2:12:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=848b2c17-cadb-44c0-ad4d-2ee0182d32f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:4c:53:14:74:a6:d9:24:d6:56:1d:d2:d5:
                    86:b1:c4:19:a5:37:a2:31:dd:68:8d:2f:01:db:c9:
                    b1:86:0a:1b:af:ed:ca:a8:e6:6b:9b:80:b8:76:08:
                    80:d8:82:13:85:55:9c:ef:34:60:42:17:1b:c7:c5:
                    e5:9d:6f:38:57:1a:8e:5e:6d:5e:7d:7a:f3:22:50:
                    17:77:c0:fe:77:99:e2:3a:05:c8:6c:80:a9:36:83:
                    e5:c8:c0:10:2d:7d:d9:bc:1c:0d:2a:47:c7:d4:fc:
                    32:1f:e6:2a:7b:ac:fe:c4:35:c4:3a:be:43:19:d4:
                    3d:60:be:70:8a:74:df:a3:72:94:5b:1f:3c:74:eb:
                    12:cc:bf:ba:18:ce:ed:81:02:9f:0b:46:db:3a:af:
                    27:d3:78:76:c8:d9:8d:96:9c:ae:3a:ab:04:96:08:
                    b5:71:83:ed:54:f8:55:2b:8a:27:60:d1:25:09:bd:
                    eb:90:e3:28:3f:23:dc:66:11:d9:0c:f1:9b:d4:59:
                    50:be:76:f8:d5:1e:56:b8:6a:a5:5b:a3:bc:06:d9:
                    25:9b:d6:86:21:79:cf:8c:84:7f:99:66:5a:e1:47:
                    14:a6:69:0a:a4:df:6a:83:34:e7:5f:24:f1:68:4a:
                    d3:36:58:08:74:a4:db:84:06:ca:3c:85:34:e3:21:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:DF:58:83:48:DA:02:6C:FE:2D:88:C1:0B:21:1E:DF:56:62:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe10dfde-46df-3365-8e74-cad177c1946d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:d9:fe:1e:23:1f:b3:81:40:f2:dc:43:be:20:40:69:bc:
         a2:c1:ee:b1:24:da:35:ab:f4:1e:3b:f1:21:5c:59:fa:8a:9b:
         fc:b2:fb:e6:64:d8:c3:63:1b:67:3f:01:e3:aa:01:9c:bf:34:
         6a:87:7b:84:28:ae:4f:46:77:7c:e8:7f:cf:a5:26:fe:4a:2f:
         21:1c:3a:d0:35:24:04:d3:e8:1b:da:66:e8:8e:fc:a1:d0:ea:
         bd:13:65:15:33:26:ad:39:f6:7b:11:4e:8d:16:f2:ee:2b:7b:
         03:20:23:01:f6:84:27:09:a5:07:43:2a:db:be:63:86:dc:9d:
         7e:13:fa:82:2a:5e:2f:6e:b4:46:e7:ae:da:ba:8a:ae:69:d6:
         3b:8e:76:65:04:7c:37:30:fa:5e:d0:c6:19:4e:67:bf:2e:13:
         fe:b2:8f:ad:cd:9d:19:30:2f:5b:ca:b3:f6:58:7f:d7:4e:10:
         5d:73:4d:1a:c2:12:c3:26:d1:e6:78:e9:93:c2:8f:63:0d:c7:
         0e:bc:78:de:78:58:57:95:63:f6:3d:39:4d:74:86:cf:46:23:
         50:49:58:34:f1:ae:44:e9:e2:9d:da:fc:8e:a4:54:48:96:cd:
         f9:23:0a:ea:23:5e:e2:17:f8:22:36:85:15:da:0c:40:f1:60:
         b4:a3:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:46 2024 by rpki-client on console-fra.rpki-client.org