Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
File:                     05ab8139-89d9-35ad-bd35-66f27355974f.roa (raw, json)
Hash identifier:          dPqDOOhaTTUVVx2G6Mp27BlYtBqg7zMER/Mdz9iAleg=
Subject key identifier:   BB:5A:DF:27:F5:CB:D0:7C:70:88:77:EF:D1:56:49:34:6E:A8:BA:7A
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285844D17FC39A9807FDD20F536E00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        155.226.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:c3:9a:98:07:fd:d2:0f:53:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=94b4a2de-5fb3-4317-a4cc-76b57324fac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3b:c5:d9:5f:35:7e:1f:1d:e8:37:02:1d:4b:
                    f2:c2:f6:e7:7d:bd:1b:8d:80:f5:f5:28:8e:0c:f9:
                    8b:b0:72:03:b7:bd:80:b6:2a:77:d8:31:2e:31:6b:
                    27:ef:a8:4a:a7:66:42:1e:e8:38:c0:1b:22:f7:d0:
                    b0:51:44:4c:9f:b9:88:39:38:12:6a:35:ea:9d:77:
                    0c:15:22:9f:2f:7a:0e:e2:c3:4b:10:dd:3f:3f:a9:
                    00:de:70:ed:52:38:46:2b:57:9d:9e:8e:1b:84:26:
                    ce:16:5b:02:f5:38:51:57:52:2f:2a:4d:ff:9c:09:
                    e0:e4:fe:18:d5:22:fb:08:1c:b1:2e:69:7f:ad:1f:
                    90:07:7c:7c:55:5c:fe:f0:78:7b:56:4b:10:66:f5:
                    c2:2d:bd:90:b6:8e:b4:40:b4:af:1c:be:4f:f2:69:
                    d1:e2:f7:46:b9:a7:4e:b4:31:b8:97:39:90:06:36:
                    69:66:2e:66:f5:ea:11:42:d7:84:80:f9:2c:a9:75:
                    4c:d7:be:0d:4a:36:58:0c:12:fd:f6:a4:8a:fd:e7:
                    74:9c:c3:b0:89:29:6e:8c:61:c5:91:d4:d2:11:d8:
                    2f:9e:41:fb:b1:1f:fd:47:16:fc:b5:29:fc:5c:5b:
                    50:67:42:39:a6:72:73:9b:72:52:37:23:34:dc:56:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:DF:27:F5:CB:D0:7C:70:88:77:EF:D1:56:49:34:6E:A8:BA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:2f:41:64:2d:61:d0:3b:48:ac:52:14:20:56:1f:3c:7b:
         f6:4f:b1:3a:bf:55:5d:c9:ca:88:90:20:65:f8:1a:1e:13:28:
         67:65:55:fb:3f:3c:e1:4f:75:c6:cf:4b:7c:68:87:61:ba:32:
         bf:48:c1:c8:a7:d0:19:82:cb:ac:dd:4c:d8:b4:41:f9:95:96:
         12:0e:fd:7d:73:55:1f:65:06:ba:5c:a2:55:28:22:40:05:a9:
         e3:12:80:d8:d1:89:e1:52:77:f1:4f:e3:10:1f:8c:e7:92:47:
         30:9d:90:7d:21:00:62:f1:18:02:f4:c2:79:79:63:67:18:17:
         74:f7:cb:f5:0d:bb:ec:fd:90:b4:7e:54:64:91:c3:ae:cd:5c:
         a2:5c:39:2d:a7:1d:25:7b:56:df:6b:8e:07:b8:3d:39:8f:09:
         85:1c:0d:bc:4e:f6:fa:88:ef:59:63:5a:66:33:54:13:69:e8:
         e0:1b:be:80:5f:0a:70:53:3a:37:f4:81:7a:c5:1a:d0:1a:f6:
         a6:e1:1e:9e:12:c2:96:df:e2:13:e8:1b:d1:5e:c9:5f:b9:cb:
         7b:41:5f:8e:8e:5f:bd:c4:2d:b0:b4:c4:68:9d:aa:26:25:6c:
         1f:38:f8:00:37:69:7c:40:0f:bb:79:a4:58:f8:10:34:96:13:
         07:ca:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:58:33 2024 by rpki-client on console-fra.rpki-client.org