Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa
File:                     3e0dfc89-0865-3433-a7dd-a589567527ea.roa (raw, json)
Hash identifier:          tKExJGMxRdajJjDaKWL3K1uj1907TreS3l9Ota+k4As=
Subject key identifier:   D3:18:A0:22:25:32:2C:9E:C0:5B:D8:CF:8C:FB:FD:56:73:10:E5:EC
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858469257901D050AAB91FE1A7700
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa
Signing time:             Wed 17 Jul 2024 20:37:28 +0000
ROA not before:           Wed 17 Jul 2024 20:37:28 +0000
ROA not after:            Tue 15 Oct 2024 20:37:28 +0000
asID:                     398787
IP address blocks:        160.153.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:92:57:90:1d:05:0a:ab:91:fe:1a:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 17 20:37:28 2024 GMT
            Not After : Oct 15 20:37:28 2024 GMT
        Subject: CN=a3f172db-0147-4769-95cf-9f2fc9d9798b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:81:44:97:c3:e4:23:9c:e2:46:26:a1:cf:
                    80:c3:0b:1a:df:80:41:c5:02:f6:c3:38:e6:f8:45:
                    f4:08:ef:df:bb:a2:86:12:72:31:ca:57:c5:8a:da:
                    02:67:6d:cc:49:cd:29:2f:e0:da:d4:07:41:d5:9c:
                    e4:4a:a7:0b:18:b5:99:7e:56:34:2f:cd:6e:4f:47:
                    36:48:c9:c7:72:6e:d5:0d:bd:26:aa:d4:1b:81:07:
                    cc:83:a8:32:ba:2b:5e:ec:4f:dd:b8:46:3c:a3:e4:
                    8d:35:0e:f7:bf:47:9b:7c:a6:aa:fd:49:e3:9c:23:
                    ae:01:4e:a1:12:68:e5:57:4a:a8:9e:69:f2:8c:e0:
                    20:eb:86:44:92:58:7a:1d:b6:42:d8:63:97:0d:89:
                    e8:97:7c:25:f8:56:16:61:76:4d:02:75:8e:4e:2d:
                    a4:ce:d8:ae:d0:41:0c:57:da:fe:c2:8f:e3:e8:ba:
                    94:3b:e8:cf:a0:b0:7a:1e:b4:84:07:e5:75:2a:29:
                    37:38:87:95:9e:76:b0:38:9f:62:f3:ca:32:1d:49:
                    49:40:d7:5f:ab:09:71:eb:35:aa:79:43:72:ae:a0:
                    0b:d2:a4:41:2b:17:b2:e8:05:34:20:3f:7a:de:f1:
                    13:7b:16:2f:db:31:02:95:ca:85:a8:88:76:f3:a8:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:18:A0:22:25:32:2C:9E:C0:5B:D8:CF:8C:FB:FD:56:73:10:E5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:62:b3:c9:ae:bf:73:e9:45:71:7f:bd:aa:01:d9:70:c2:
         c7:23:b7:46:b4:57:94:8a:c2:a8:b4:d3:b3:bf:6b:de:60:05:
         94:fc:7e:dc:54:dc:e6:ec:59:01:a9:28:4f:e5:a9:3e:99:b0:
         51:a1:96:14:42:3b:8c:cc:62:5c:fb:24:86:03:48:74:0b:1a:
         ec:2b:c7:2a:7f:a3:d9:64:21:d2:1b:dd:84:6a:e6:c1:a3:d8:
         44:1e:b1:30:5b:2f:30:2c:b7:21:86:ef:6d:1a:19:12:d4:8e:
         f4:ec:32:a5:3f:b6:0e:9d:fd:09:68:d6:89:3e:0c:b5:5d:ff:
         f4:63:9e:2e:0a:a2:62:a1:2b:1e:bd:d1:64:33:ca:52:24:f5:
         f9:e8:a3:a9:1f:9c:95:15:66:33:6b:e1:2d:de:8a:91:c1:8d:
         cd:ef:cb:85:30:97:17:45:c9:4e:80:ac:74:41:ab:1d:11:19:
         1b:74:a6:2f:a3:21:dd:a9:9e:87:3c:3d:4d:2b:c0:50:ac:b2:
         8d:d8:79:74:ed:fe:b1:6c:20:05:76:eb:b9:64:43:18:fa:b6:
         89:35:66:96:ae:88:b9:ee:6a:35:c5:45:38:5e:11:55:fe:fb:
         73:7a:77:fa:a2:86:7e:83:2a:64:85:2e:ca:0d:40:47:1b:52:
         37:8b:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:04:25 2024 by rpki-client on console-ams.rpki-client.org