Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
File:                     edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa (raw, json)
Hash identifier:          ikAPGHtHxO+xP0m9Fgbn8ThQeG/dB2P4yhrgW0rQhpg=
Subject key identifier:   99:02:0C:DA:A9:C3:74:57:AD:29:05:61:34:92:F4:78:05:23:A9:44
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285847213B21BADB814455C6C3BC00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1403
IP address blocks:        107.161.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:21:ba:db:81:44:55:c6:c3:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=b95c2e71-da14-43cb-858b-a529d5b3d03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:8e:4b:12:37:49:97:23:36:1a:d6:b8:51:
                    64:3a:40:d3:59:db:7a:78:22:b3:12:e8:2a:89:7e:
                    ee:d7:e6:76:c0:90:33:63:5b:60:44:db:ad:a2:7d:
                    e5:de:2d:c9:95:c4:12:12:c7:8b:ed:14:a8:4b:2a:
                    4e:0d:3e:55:e9:42:23:78:12:3b:21:f6:8c:3e:bb:
                    ad:bd:b9:43:6e:82:38:f4:4c:13:3b:a4:68:5c:e1:
                    fc:dd:9e:04:1c:d9:40:9e:36:14:7b:ed:01:fe:5b:
                    56:a5:a1:d6:f1:96:20:19:47:b0:19:b4:40:53:6a:
                    cc:2a:ea:4c:f9:32:f8:a0:cb:fc:08:6e:a4:26:02:
                    07:4b:5b:91:9e:39:d8:cf:7d:71:83:32:ea:4d:1f:
                    b1:07:cf:1b:5f:e4:f6:27:99:d3:0f:4a:76:95:83:
                    28:9e:a1:2f:1b:f2:91:b5:83:64:ac:78:52:16:e1:
                    ef:37:d2:89:1c:bf:b4:7e:75:1b:dc:d8:f1:f7:d9:
                    1d:83:0b:6a:91:3b:83:e3:ae:a0:af:83:06:3e:f4:
                    b9:d5:1c:fc:54:4d:03:a6:40:49:39:ad:a0:d6:19:
                    57:8d:29:33:71:09:b3:54:1a:13:a4:b2:22:2f:fc:
                    64:ae:92:1d:4e:71:4d:f6:d3:c9:f5:58:6f:11:bf:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:0C:DA:A9:C3:74:57:AD:29:05:61:34:92:F4:78:05:23:A9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:62:0e:8e:05:75:69:38:c4:60:dc:b8:e5:7c:a3:8a:79:b4:
         e0:a6:f3:61:6f:4b:70:7e:50:97:1a:24:8a:d1:66:ab:31:cc:
         e5:cd:7b:b7:28:35:bb:a1:ab:ae:73:59:36:34:56:0d:fe:de:
         54:42:05:f9:56:41:3e:90:a0:3d:cc:6e:3f:ab:0e:40:b9:ad:
         fb:f8:7c:b3:a8:9c:7b:a0:5f:b5:c9:31:9b:7e:59:23:f2:5e:
         95:2c:1c:91:11:07:40:5c:cb:77:e8:09:ee:37:41:c2:5b:55:
         08:23:09:db:fc:32:36:b7:21:4f:ae:35:25:b8:24:d3:bb:6c:
         7b:3b:b5:79:40:d4:c0:0c:c7:8a:cc:4c:bb:5b:4c:a5:6b:73:
         1d:57:08:1e:10:0e:72:82:29:6a:95:f4:9c:ce:32:27:95:0b:
         24:16:c8:bb:f9:ce:9d:d6:4a:2d:66:08:8a:1d:18:d2:e0:d7:
         82:e0:b3:78:05:f8:0b:e8:8f:4f:e2:b3:c2:f3:10:ab:e4:60:
         ea:bf:f0:ab:0e:0d:45:70:0c:07:78:94:15:14:7c:b3:a5:bc:
         25:40:3e:fa:ec:f5:a9:cb:ca:3a:0a:36:dc:4c:24:2e:f3:fd:
         6e:25:20:2b:25:84:7c:3d:d4:c8:52:7b:a7:c2:81:b9:b5:92:
         e1:4f:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org