Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
File:                     866a1286-9086-381c-bebe-035302ba5bb7.roa (raw, json)
Hash identifier:          ebbm1g1kQb8dfw//dC5/eGE4776SVEd6QMP27RatR6Q=
Subject key identifier:   DE:77:FE:4E:54:17:82:CC:89:2A:61:E3:6C:A9:9B:E6:D8:D7:81:0E
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F43285847CD09EE9AB24A0D9AC19C3D00
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        150.9.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:ee:9a:b2:4a:0d:9a:c1:9c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=57a2be92-59ef-4b2e-9069-522c1c7d65af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:e2:a5:c1:28:60:63:c5:8e:19:e3:be:73:
                    e2:52:33:ff:31:44:74:4d:b6:b7:68:1f:57:86:31:
                    8b:f7:e8:e2:e9:74:ac:54:ba:aa:4d:6f:9a:53:24:
                    9a:a5:68:10:4b:c9:02:24:07:75:a8:76:d9:62:36:
                    88:16:83:3c:5f:8f:b2:1a:bc:fd:26:bd:d7:e9:82:
                    c4:c8:25:cc:bf:20:2f:85:08:8b:49:89:48:be:c1:
                    58:03:d5:d4:ef:e2:ab:12:f8:e8:0e:2c:fe:e7:db:
                    7f:c9:d9:a6:6d:4a:98:ec:05:81:a7:19:1d:71:6c:
                    ea:9b:7b:22:18:8d:d7:03:74:6c:df:c0:a5:e9:39:
                    65:ac:8a:b3:bf:7f:1e:05:fe:1e:3d:e6:c6:87:72:
                    2c:42:b2:41:a7:94:b2:70:87:20:62:9c:46:bb:3c:
                    bc:26:c1:53:43:7b:1c:f8:e5:55:97:5c:dd:4a:74:
                    c8:9d:a4:62:a9:66:94:97:05:56:76:77:2c:20:a2:
                    11:28:fc:71:ca:fe:97:08:af:42:40:06:c5:67:83:
                    04:10:88:d6:ea:22:a5:51:b3:eb:19:be:05:89:f6:
                    9b:e0:af:eb:6b:7f:b3:ff:3c:ab:cf:29:10:ee:31:
                    6e:7a:3d:62:f9:ad:69:15:4b:da:8e:ef:64:23:78:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:FE:4E:54:17:82:CC:89:2A:61:E3:6C:A9:9B:E6:D8:D7:81:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:92:21:5e:b7:79:1b:01:95:da:1e:e7:a9:5e:63:9c:71:
         91:6b:4e:70:87:8a:ec:06:3c:df:c2:df:a6:3a:11:f3:c4:6a:
         ff:d9:11:4b:c4:37:0d:03:e4:96:5d:19:3c:30:2d:72:8e:b2:
         cb:59:53:05:88:fb:c8:37:5d:a6:a1:40:01:0f:8f:59:de:05:
         9b:43:08:a4:7b:cf:d4:32:cb:77:27:9d:9b:c5:81:cd:59:91:
         3f:ba:fb:b8:a3:88:84:a9:6b:af:cc:ec:dd:f5:a6:9c:67:b7:
         2b:56:8b:da:07:7c:54:6b:52:91:7d:16:43:34:97:cb:f3:8c:
         a9:a2:65:fb:b7:21:0f:3e:88:4a:0a:4d:0d:1e:04:8c:03:0e:
         b7:21:98:15:16:a8:52:88:3e:a9:b2:d6:50:0e:40:a9:86:0d:
         cc:8d:f9:60:4b:98:ca:8b:c7:fc:cd:c3:b1:85:31:19:85:a9:
         0f:ad:61:8f:82:68:d9:b3:ca:f8:6d:b5:07:30:3b:0c:f9:41:
         74:ad:9d:3b:65:88:60:dc:a8:75:8e:bb:f3:90:48:48:db:da:
         66:95:a5:c9:54:53:a0:8d:3a:5d:29:f9:7a:80:cd:28:08:7f:
         6e:8f:12:51:9e:71:0a:77:8b:97:d2:02:8a:2e:b2:6b:60:1b:
         6e:70:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:28 2024 by rpki-client on console-ams.rpki-client.org