Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa
File:                     666d6b6c-4391-36f8-800f-af3d15ad4226.roa (raw, json)
Hash identifier:          xq2lKXOt6IOdbn0u3xpJCrkiWUoL2bSADHO5npmL9EY=
Subject key identifier:   4A:6A:D9:8A:CE:0A:40:15:0A:77:6E:34:DE:99:6A:B7:57:3C:CD:25
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847BC2C1F4BB72C33D537F9CA00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        162.215.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1f:4b:b7:2c:33:d5:37:f9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=01157cb9-1fff-4c47-98e5-1673e78bc220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:40:00:02:65:b9:74:94:97:e4:0a:68:3b:
                    1c:b1:6c:71:7b:2c:e4:46:e5:40:5e:ed:4b:db:6a:
                    9f:1f:33:aa:77:57:91:07:f3:5b:f7:d4:d1:bb:db:
                    6a:67:3b:0b:ba:c7:1d:4f:bd:c8:aa:3c:49:5b:cc:
                    f5:81:bb:1b:08:eb:46:58:99:b5:3c:87:7f:39:b9:
                    f4:54:18:dd:b7:81:9b:22:c9:f5:05:50:61:21:60:
                    e9:47:c6:04:58:75:17:03:b6:89:b8:32:f6:0f:b4:
                    e5:eb:ba:25:32:2f:7b:15:f2:e7:3a:e4:7b:61:49:
                    28:7d:75:69:2e:46:20:a5:56:f6:52:e1:56:2c:96:
                    b0:69:86:f4:8a:a3:6c:b0:94:5e:5f:e2:5e:01:41:
                    1c:5d:e5:4f:ea:eb:36:ff:f7:20:31:1e:24:d1:aa:
                    ee:6d:cb:86:b5:7a:3f:23:6f:2e:8a:43:d3:82:04:
                    69:b5:27:cb:45:7d:33:c8:0d:fc:37:d1:29:06:df:
                    d7:7c:60:bf:c6:bf:55:6c:d7:01:bd:12:be:5f:b8:
                    ef:11:06:5f:34:15:b8:13:f4:81:c0:7a:6a:77:d1:
                    8e:d6:c0:5a:c7:fd:0d:78:d7:5d:dc:50:03:f9:53:
                    ef:ef:61:f1:11:b3:b7:dd:bc:15:bb:8b:46:d9:2b:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:D9:8A:CE:0A:40:15:0A:77:6E:34:DE:99:6A:B7:57:3C:CD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:1e:a8:c5:99:cf:07:1d:33:5d:e7:01:8d:a9:f2:2e:bb:
         6b:0b:7d:b2:fb:3a:e1:f6:d7:56:69:94:b0:14:23:38:f7:95:
         af:1e:e3:ca:ad:53:96:48:5d:d2:b2:a1:f6:c4:c3:a1:8e:1c:
         0d:09:2b:00:4c:ff:c2:9b:b1:a0:2d:0d:71:2c:d0:a3:c7:ec:
         ea:f3:a6:dd:cf:d7:80:bc:6e:19:dd:44:45:1e:90:f1:7f:64:
         3e:ae:d5:c2:22:74:3e:8c:b8:f3:1c:43:ac:87:60:1b:ae:29:
         44:01:dd:7a:21:22:9d:9c:5e:64:b3:4f:e4:fa:63:1d:06:8d:
         35:15:cd:4d:de:b9:07:ca:9b:fc:1a:db:d6:c7:36:44:7b:d6:
         05:a1:01:ad:8f:4b:ae:83:9b:59:82:ec:20:43:67:06:91:cf:
         da:30:c7:0e:ef:35:6a:05:07:27:64:f3:58:62:52:09:f6:3d:
         5c:a0:47:44:dc:32:0e:ba:bb:9b:11:4e:33:a2:4c:ea:55:f2:
         e4:09:3f:76:97:46:33:48:30:75:c8:16:ca:8a:51:85:f9:65:
         69:e7:23:6d:24:f5:47:51:5f:34:23:4e:bb:a2:77:df:79:57:
         9b:c2:57:bb:0e:35:cd:a6:90:2f:c5:11:15:6c:11:05:63:7a:
         55:ea:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:21 2024 by rpki-client on console-ams.rpki-client.org