Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa
File:                     2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa (raw, json)
Hash identifier:          lYk+Ycrd+QRALRh0zZW+CzZXDcdqBuoYc8fnFdR3Rdw=
Subject key identifier:   52:E3:87:F5:D5:0F:52:38:6C:BA:54:54:D4:64:C4:F4:E8:EC:1D:BB
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D389E366524BCCD16C41000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa
Signing time:             Tue 09 Apr 2024 14:16:12 +0000
ROA not before:           Tue 09 Apr 2024 14:16:12 +0000
ROA not after:            Mon 08 Jul 2024 14:16:12 +0000
asID:                     16696
IP address blocks:        148.59.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:38:9e:36:65:24:bc:cd:16:c4:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 14:16:12 2024 GMT
            Not After : Jul  8 14:16:12 2024 GMT
        Subject: CN=786b0b88-80cb-4a33-9866-6377db1a70a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:96:1e:cf:27:d3:9e:58:73:d0:27:ec:68:
                    d6:3a:91:62:3b:cc:54:bc:f2:3d:74:df:c8:5b:c7:
                    80:9f:57:10:23:2b:c6:ca:fc:53:55:f1:f1:e3:fd:
                    1d:fa:8f:cc:3f:b7:59:37:02:51:56:54:91:4a:64:
                    95:0d:4b:bd:1a:d6:ad:0e:52:a3:3f:49:05:b9:3f:
                    c0:9c:f8:c3:80:99:23:28:e4:94:3c:c1:e0:14:0c:
                    e4:af:3c:24:bf:87:f4:ef:20:b8:93:15:a4:fa:3f:
                    3c:1d:a5:05:56:2c:e0:16:7a:8e:18:56:87:79:45:
                    83:fe:c5:62:c4:3a:3c:3f:1c:dd:2e:5b:4f:3f:43:
                    f0:08:65:a1:a2:df:fe:10:dd:10:64:46:a9:50:3d:
                    54:56:c7:7d:82:50:a5:03:f0:34:b7:f7:de:87:51:
                    1b:3c:b5:9b:57:16:eb:83:24:38:11:f4:c5:f4:f9:
                    de:4e:db:0a:20:3d:de:9d:79:3f:77:37:4b:8b:bc:
                    3e:1b:27:ee:29:dd:b3:c7:d9:91:c6:07:5e:4c:09:
                    65:0f:69:ab:89:de:6d:21:d2:7b:d5:40:f1:94:2f:
                    6e:80:4d:6d:e7:03:c8:81:d7:be:94:46:51:7b:8d:
                    50:8f:89:9e:b9:7c:f4:65:11:56:0e:11:d2:cf:36:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:87:F5:D5:0F:52:38:6C:BA:54:54:D4:64:C4:F4:E8:EC:1D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ba:69:5a:48:bd:85:1f:bc:90:f0:6a:da:3b:52:38:d8:6b:
         6b:11:36:1f:52:17:74:4d:c4:e9:5b:d8:86:42:3c:d5:aa:67:
         ce:81:e4:e1:25:ff:e0:8a:fd:b4:55:2c:64:1a:aa:5e:fb:fb:
         e8:a0:ab:02:0f:2b:2f:d5:7e:cf:b8:f8:ae:36:4e:c9:d7:59:
         df:cd:c2:db:d7:48:0b:04:95:e8:50:ab:be:de:57:00:7f:d4:
         83:b0:07:e6:6f:09:91:4b:77:f6:2c:16:d7:d3:29:81:40:f3:
         8a:a9:05:a8:00:9e:7f:50:81:2b:2f:c3:8a:08:37:1a:18:cc:
         3f:ba:a3:d0:0b:9b:f2:ba:ee:5a:e9:03:8d:8f:59:54:9d:e3:
         e5:8d:d4:9a:1f:45:4a:a9:80:e1:19:01:1e:a0:d1:4a:aa:a1:
         f4:fb:5c:a9:72:61:77:ba:f9:ba:eb:cc:92:1d:cb:38:77:85:
         cb:8d:d0:41:aa:ef:c8:8a:66:ce:37:4a:11:da:e0:8e:3e:a3:
         d7:39:f7:4e:46:8f:73:c8:b7:14:a5:a3:da:91:2a:a8:12:09:
         43:c4:83:3b:d2:9e:c3:a4:3d:be:ad:22:4a:9e:9f:e7:b3:ea:
         07:68:a4:f1:08:af:8f:02:d1:77:72:0c:c0:64:3f:0c:2f:29:
         2c:96:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org