Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa
File:                     43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa (raw, json)
Hash identifier:          cFqY5Sa6UacUSRhG9DRpYf9SqGg8AOUWH8cUqnVZYHI=
Subject key identifier:   DA:27:52:89:84:C0:27:95:A6:EE:27:D7:F0:08:8D:DC:72:1F:56:8D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584776610771F7C328E93DF76680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        165.254.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:07:71:f7:c3:28:e9:3d:f7:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=c0820a58-c751-469f-a787-f32adfd7e712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:b7:bc:3a:c9:b3:d5:8c:88:10:07:b8:34:
                    51:c7:4d:44:6a:78:0f:bc:f3:95:8d:04:5b:1d:e3:
                    81:12:f1:aa:8f:77:27:14:79:9f:61:b0:7d:c6:f5:
                    a5:f5:0e:db:e6:8d:e3:18:a5:1d:09:2d:31:ad:e9:
                    39:cf:5d:b9:0c:f3:48:2d:1e:da:c4:35:63:df:e7:
                    20:cb:d3:04:2a:7a:1a:bd:ac:b6:8b:90:70:d2:cb:
                    90:c9:a3:28:05:c4:81:40:f2:a4:dd:77:94:22:2b:
                    90:89:d5:b8:d4:67:8f:8a:75:f1:5f:bf:3d:f5:ae:
                    92:ee:c1:ba:67:a3:81:ec:8a:ea:9d:34:1d:06:ca:
                    de:1d:d8:5b:cb:0d:f5:8a:38:20:68:fe:c7:ca:15:
                    3a:f6:3c:51:9e:0e:cb:34:b8:1c:2a:17:60:5d:dd:
                    4c:77:47:89:78:eb:d4:88:7c:77:fc:97:98:82:b6:
                    19:09:27:35:61:66:ff:f0:1a:7b:38:c9:3e:14:77:
                    0f:48:54:12:9d:bf:6f:ef:c1:5e:9d:ca:f7:d9:d3:
                    ac:fb:8c:21:5d:f0:9d:ac:a9:b1:7d:7f:d9:8b:54:
                    a3:4f:88:7a:b8:ea:50:84:f3:97:85:11:4c:73:dc:
                    58:3a:d6:1d:24:c2:dd:71:36:d4:34:bf:31:b1:fb:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:52:89:84:C0:27:95:A6:EE:27:D7:F0:08:8D:DC:72:1F:56:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:cd:b1:49:d2:15:7e:2f:8c:c0:c0:41:ef:27:f5:1f:11:e1:
         f9:34:f1:86:60:4d:02:ad:46:2a:62:22:cb:f8:fc:4e:1b:f2:
         f0:ce:0f:81:22:c4:c0:cf:6a:01:1f:5e:5a:42:02:8b:c0:c0:
         2e:c1:f0:0a:f9:3d:64:31:c9:97:5b:43:f4:af:37:c6:27:1f:
         fd:30:84:8d:15:18:5e:15:59:23:c3:6d:80:a1:5a:f5:37:15:
         61:2f:6c:1d:29:4e:53:41:d8:fb:24:13:f8:4c:2d:c1:0f:1c:
         fd:3f:25:85:48:a8:6f:eb:99:96:4a:06:98:6b:73:96:f0:47:
         2a:a4:75:b6:d4:8c:c2:51:4a:ed:71:c5:6d:3c:40:82:dd:b0:
         a6:06:25:87:29:7d:9f:18:ef:e0:87:81:68:a6:51:ee:83:80:
         d1:ca:07:ea:bf:f2:56:66:ca:90:b2:e9:65:10:4c:bb:fc:3a:
         2c:ef:95:59:92:ab:8b:1c:73:c3:6e:82:77:c0:17:5e:a4:7b:
         a3:17:fb:82:25:4e:88:d3:5e:21:f1:03:d1:82:d8:d3:91:5e:
         1d:09:6a:0f:c8:88:9f:26:8c:bb:c2:11:c9:eb:4e:9d:bf:6e:
         1d:98:08:4a:01:6a:74:fd:5d:c6:cb:f0:bc:a2:d3:2c:c0:39:
         fc:93:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:00 2024 by rpki-client on console-fra.rpki-client.org