Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
File:                     53e29c51-e37d-313a-8354-995124430718.roa (raw, json)
Hash identifier:          U9hNao9NMfb0NyUfCJWWvElhEYRDwF0+d3V/Y+uXoXM=
Subject key identifier:   CB:68:28:77:EE:E9:82:10:FD:C0:F3:38:4A:86:EF:80:1A:AC:01:EB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285847ED24C8EAD0877A7E11A35FC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     3949
IP address blocks:        165.254.26.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:ea:d0:87:7a:7e:11:a3:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=b69a87d5-3678-464f-81ee-42cd96212c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:45:48:70:79:fd:ca:0b:c8:a9:82:3c:19:
                    a5:fd:0b:fa:bc:6e:69:c1:ec:99:26:b7:c1:47:45:
                    55:0f:21:d5:17:db:65:e5:cb:1e:eb:21:73:f7:c3:
                    9f:00:5e:9d:5b:35:c9:04:8f:b1:08:29:ec:67:50:
                    d4:70:e6:86:b2:58:a8:34:10:29:73:e9:00:fb:c1:
                    50:53:03:af:18:7e:ba:54:0e:0e:f8:a6:fe:ae:1c:
                    88:10:2a:3c:0d:84:68:cc:38:35:ab:8a:2d:99:37:
                    5d:ac:b2:56:e3:25:a1:20:2f:66:91:2e:93:dc:92:
                    45:16:37:1a:2f:99:61:53:46:ea:ea:42:c2:de:1b:
                    09:b0:22:3b:cf:3b:d9:1c:cb:cb:43:5e:98:29:a5:
                    ba:28:3c:31:04:35:04:b4:36:e9:f8:d4:fc:9f:5d:
                    aa:b6:fc:d2:05:f8:6c:48:67:2c:ed:58:4f:b8:76:
                    84:77:3f:72:ba:8c:1c:54:73:fa:c3:94:e7:23:3e:
                    fe:94:a1:4e:3c:81:96:50:94:c2:5d:11:34:c6:56:
                    12:8c:4b:87:82:5e:6d:d6:ed:09:fc:cb:73:5a:08:
                    8e:6e:60:81:c9:0a:f9:d9:59:4c:6a:ad:ed:7c:bc:
                    7a:98:d0:f7:16:3b:99:bd:0e:b8:9f:a4:47:9a:ae:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:68:28:77:EE:E9:82:10:FD:C0:F3:38:4A:86:EF:80:1A:AC:01:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.26.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:46:1a:2a:ed:b2:2a:de:37:d7:82:e9:ad:fe:8d:91:d1:80:
         08:45:37:c0:84:46:8b:07:3d:65:40:62:f8:7c:63:91:61:f4:
         ae:3c:71:ae:8e:ce:48:49:0a:0c:2c:be:d1:8c:34:36:cd:d1:
         3b:93:83:1e:c8:c9:b3:4d:fb:6b:52:97:75:a4:26:e1:f9:a2:
         da:f2:76:c1:9f:e3:10:e6:d9:c0:e4:80:a1:c4:88:35:1a:04:
         1e:c3:80:28:42:ed:f4:23:6f:91:33:18:2d:85:b9:23:02:2d:
         45:d7:0b:c1:07:2d:8e:3c:3e:89:28:0b:75:93:2b:f0:cf:d2:
         04:bd:f8:88:56:bd:a4:35:86:b6:b6:cc:c0:b9:13:6f:65:1b:
         8c:65:77:a9:9d:ba:11:9d:60:5c:be:5c:b2:3b:a9:4e:60:b0:
         df:f7:16:92:5a:41:a8:65:66:ab:78:9d:29:0c:b0:a3:28:19:
         5c:d8:ed:4f:db:c0:e2:86:d2:d7:2a:32:69:b0:ab:43:93:2d:
         5b:6e:be:d1:8b:39:75:c6:63:47:d5:33:06:47:8b:24:a9:68:
         3b:ca:7d:82:82:4d:58:c2:1c:22:c6:d8:ca:d5:6a:76:d5:96:
         36:a5:59:76:1c:55:b7:99:5a:ed:ed:04:7b:f2:87:03:a4:08:
         18:2a:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:11 2024 by rpki-client on console-ams.rpki-client.org