Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/4e1170e3-c4d5-3038-9187-d063c323443e.roa
File:                     4e1170e3-c4d5-3038-9187-d063c323443e.roa (raw, json)
Hash identifier:          pPZio1iAYBc747oTe0vFHxKsn8GNjN31uoxsElpE2t0=
Subject key identifier:   AC:79:47:C9:96:84:FA:C7:88:5B:49:D1:D5:2E:4A:B5:ED:0E:D3:52
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F43285845840DBF81EAB3782BB5281BC0
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/4e1170e3-c4d5-3038-9187-d063c323443e.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     46450
IP address blocks:        161.129.184.0/24 maxlen: 24
                          192.197.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bf:81:ea:b3:78:2b:b5:28:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=9bd41869-895e-4a76-bd14-8f57467672b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:7d:54:e5:0f:6d:b8:07:83:83:b3:b2:0b:
                    ac:94:31:30:96:54:d3:9d:c7:03:13:1e:f9:5d:e0:
                    63:d6:a1:18:f8:82:4e:a1:22:dd:a2:2a:4c:85:93:
                    f7:1a:32:69:d0:04:3b:5b:5f:be:3d:0e:a4:53:58:
                    01:42:bb:7a:b3:45:49:b3:ad:10:16:23:35:8f:b7:
                    c0:5b:4e:56:c1:e1:97:4c:f1:1c:69:6c:cc:97:7e:
                    1c:ab:44:e9:e5:f5:b8:04:12:9c:77:0c:87:5e:ee:
                    e1:87:3e:84:f9:62:4e:24:67:0f:1b:3e:f7:6e:a1:
                    5c:09:98:c4:da:f8:49:17:75:89:08:a3:02:a9:d0:
                    bb:dc:e4:40:04:47:a1:fe:14:96:c0:48:34:4b:cb:
                    c4:19:12:a9:68:ff:37:47:7c:09:84:fc:1f:b7:cb:
                    99:f6:d7:b7:2f:d9:34:d3:97:43:63:39:b8:54:04:
                    35:41:49:71:c3:c0:5a:21:a2:3c:25:26:68:d9:cc:
                    b4:c8:7a:ac:de:d4:13:42:b1:64:15:54:75:be:f6:
                    cc:ea:eb:b0:b0:6c:e4:3b:99:45:57:ac:2d:31:e9:
                    37:d9:71:75:cf:94:a7:bf:28:04:de:bb:af:54:11:
                    ed:cd:5f:7f:88:cd:7b:dd:a2:95:74:6e:29:b4:06:
                    9f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:47:C9:96:84:FA:C7:88:5B:49:D1:D5:2E:4A:B5:ED:0E:D3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/4e1170e3-c4d5-3038-9187-d063c323443e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/24
                  192.197.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:69:02:04:80:35:24:cb:1b:97:46:6c:a7:d0:30:0c:e9:
         ff:94:d6:05:3b:b2:4e:4f:47:d0:9c:b7:07:8d:33:23:43:fa:
         c4:14:6b:cd:fa:72:b2:64:6f:95:94:7a:c1:ad:91:14:a4:7e:
         e7:02:b3:c4:87:22:40:0b:4c:dd:68:fa:ce:29:20:ff:57:5a:
         e0:2f:41:d5:8a:da:84:a0:4d:e2:49:69:99:ac:3f:c7:42:c1:
         07:e9:5d:53:ec:48:d7:5d:53:74:4d:51:22:d5:85:19:07:74:
         3e:22:7a:80:62:a2:90:05:39:b3:24:2d:42:c8:fc:39:30:e4:
         1c:00:81:54:11:d8:a7:08:fd:66:06:ab:19:f6:1d:73:5d:65:
         fe:da:7d:bb:ad:58:f7:bd:12:c8:5d:af:50:df:5d:98:fb:d5:
         26:c0:b2:a5:37:0a:cc:ab:66:72:e9:b3:57:ef:87:6c:95:42:
         a1:58:5f:2c:a0:55:9b:75:b6:3c:b1:22:2d:bb:dc:2b:e1:da:
         57:43:02:33:0d:49:e7:27:d3:1d:9f:4a:ae:b2:9a:a4:c3:f5:
         c2:9b:22:8c:98:d0:5d:9c:1c:f7:31:53:48:37:a1:e8:03:dd:
         29:97:c0:57:87:a2:a7:7f:8f:6d:a4:34:b5:af:c5:e6:d4:50:
         72:3d:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:38:37 2024 by rpki-client on console-ams.rpki-client.org