Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa
File:                     ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa (raw, json)
Hash identifier:          pyuqoMMO4TndDRbk7SqkNzYEViGLYsoS+hZRs/sOTWo=
Subject key identifier:   AB:F9:41:AB:93:B9:7E:12:04:24:95:A8:2B:C7:EA:65:85:EC:70:82
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584561286A462E087522B78348C0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     1403
IP address blocks:        107.159.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6a:46:2e:08:75:22:b7:83:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=b2174731-639a-4bf2-aaab-c43d5cbc365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:77:b9:f3:aa:1d:a4:80:ef:36:91:30:0c:
                    a5:57:db:cb:1e:6d:54:a9:12:95:fa:7b:74:31:38:
                    7d:2a:b8:9d:99:d0:0b:1c:18:bd:2f:8c:fb:21:05:
                    91:17:46:6b:c6:96:fb:a5:0c:4e:e6:65:2b:14:02:
                    78:ac:3e:c3:cc:84:90:9f:7f:6e:7c:37:55:05:47:
                    e3:b1:18:b6:e4:69:f0:d3:93:6d:b6:54:ba:90:50:
                    62:d6:c0:89:39:c8:9c:5d:93:97:ce:ab:7c:e8:44:
                    4d:e6:80:f5:d1:8f:ef:2c:a4:72:93:d2:4b:fc:c3:
                    01:75:8f:35:35:f1:d0:b7:0a:5e:9e:90:12:72:78:
                    1b:92:a4:31:94:87:e7:80:96:6e:b0:5f:62:1c:5c:
                    5d:aa:a0:e6:ee:1b:32:f4:7e:1e:67:c8:72:e3:90:
                    e7:93:8f:46:97:b7:88:e1:24:e8:0c:fa:05:3e:46:
                    52:f9:10:f3:07:a5:dd:c1:2e:8d:d6:f2:0b:65:e0:
                    4c:54:4d:82:70:9f:fd:47:af:dc:e9:dd:b0:df:53:
                    43:4c:fd:0e:aa:8e:d5:e9:7e:72:8d:12:6f:6d:0c:
                    28:80:ff:7c:48:aa:96:4e:cd:54:3f:df:e4:f0:27:
                    34:67:b0:33:b5:46:27:95:d9:7d:8a:30:1f:bd:9d:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:41:AB:93:B9:7E:12:04:24:95:A8:2B:C7:EA:65:85:EC:70:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:0b:0d:d2:cd:99:a0:07:07:a3:1a:b7:64:72:3a:7b:29:
         b3:55:f2:b3:9a:4c:00:00:5e:7a:02:89:92:4b:95:47:04:f4:
         2c:18:9d:c8:b6:09:41:87:17:a1:e8:c0:c7:c5:ee:1e:7f:1c:
         81:87:ad:a0:eb:3a:48:16:c9:86:33:ea:a1:3c:f6:ee:e6:64:
         54:56:82:73:a3:bc:30:f1:5e:6f:b1:a4:4a:0f:83:ab:62:ce:
         42:38:48:66:05:90:6b:47:c4:e2:b1:c0:21:68:77:4b:1c:f1:
         ed:02:a9:0c:ab:7b:5a:9c:d5:dc:29:75:09:da:f5:ce:db:06:
         96:ab:37:d5:a1:e4:3c:74:a6:14:5a:01:ad:71:8a:25:8e:5d:
         d8:0f:90:38:dc:4f:b8:cd:a9:87:06:56:5e:9d:4f:ca:68:bb:
         2b:ad:c4:67:f2:a0:95:17:c7:f6:64:6c:43:be:58:ac:c2:c2:
         be:47:72:93:f0:3e:76:74:b4:c3:ac:0b:ad:85:6f:c3:08:c2:
         df:ba:4f:26:71:53:95:d4:f8:75:b0:15:3e:78:01:50:be:32:
         cd:c2:99:60:31:b8:b7:3f:21:05:91:e2:0f:c1:b9:20:12:1b:
         bd:d7:d6:5d:b0:c4:31:28:77:53:fb:4c:a7:00:63:4f:17:e7:
         7b:c8:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:02:36 2024 by rpki-client on console-ams.rpki-client.org