Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
File:                     450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json)
Hash identifier:          dZbitlypXJIDR2B9sIJwFwJhlcSyN8wjjj33Kdxh6+E=
Subject key identifier:   D7:72:B7:48:A6:5C:EA:F7:21:F5:AE:0F:A8:1C:74:E4:92:DB:97:FE
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F43285847CDE3BA57AEEB543B87578740
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
Signing time:             Thu 07 Nov 2024 21:19:30 +0000
ROA not before:           Thu 07 Nov 2024 21:19:30 +0000
ROA not after:            Wed 05 Feb 2025 21:19:30 +0000
asID:                     13347
IP address blocks:        167.253.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:e3:ba:57:ae:eb:54:3b:87:57:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Nov  7 21:19:30 2024 GMT
            Not After : Feb  5 21:19:30 2025 GMT
        Subject: CN=83e7e1c1-5163-4916-aa44-0da6fd36c74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:14:5f:14:11:e8:3d:9e:2c:80:bf:ae:dd:
                    56:f4:fc:56:cc:11:cc:1a:67:52:31:7f:bc:13:9b:
                    f5:52:4f:e9:2c:7f:fe:b7:b6:1b:e8:36:58:d7:b4:
                    0a:ec:8d:1e:3e:1f:86:0f:b7:fc:23:f0:30:8e:54:
                    e2:3b:4a:aa:c1:72:bf:80:ad:d8:f0:15:49:f6:90:
                    7e:f3:1d:13:bc:45:a2:9a:58:87:09:9d:fb:60:c6:
                    5a:64:c5:78:fa:7a:b4:65:32:5d:bf:7e:dd:d3:8b:
                    5b:33:e2:97:b5:14:61:4e:a9:25:6c:ce:a6:b8:27:
                    d2:86:81:bd:3e:4b:2f:82:ab:92:1c:45:0e:c0:2a:
                    de:0a:2f:b7:26:3f:ad:9a:d9:31:ee:b9:75:79:04:
                    f2:22:04:a5:89:96:ab:fd:0c:ca:a8:49:3c:62:a0:
                    48:b0:43:be:36:0a:11:e2:42:a1:de:3e:b6:57:b8:
                    5b:ae:78:37:f0:46:11:64:76:06:37:84:3b:9f:5d:
                    3d:68:c5:10:82:86:16:d6:4f:d0:01:15:27:03:5c:
                    a6:d2:dc:8f:a5:b9:8e:80:01:6f:3a:69:78:34:02:
                    59:4a:01:4a:25:d0:31:3f:04:1b:57:3f:f5:01:ff:
                    63:5f:c1:73:cf:db:22:1b:9e:8d:bb:31:1e:c5:15:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:72:B7:48:A6:5C:EA:F7:21:F5:AE:0F:A8:1C:74:E4:92:DB:97:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:c6:50:f0:5a:c1:6a:8b:a3:b9:dd:38:cf:02:10:7a:f8:
         f7:b5:0d:92:3e:6c:73:2a:2c:23:df:c8:51:a4:90:bd:67:aa:
         4e:1f:9e:be:8b:d0:60:37:2e:e8:48:12:6c:c9:b3:21:88:49:
         94:0e:b9:6b:48:14:12:26:f7:8a:10:91:7d:24:2b:9f:85:41:
         95:6f:11:87:ef:fd:86:41:bb:77:e5:a5:e9:0a:70:b8:7a:6d:
         03:26:2e:df:1b:d5:08:79:63:ea:d7:d5:79:97:90:0a:c0:82:
         80:15:14:33:51:06:32:05:07:b4:26:29:9a:f4:e6:0c:1e:e4:
         10:e6:41:8d:a2:4f:2e:16:5e:01:6c:74:fa:ce:52:51:59:5c:
         8f:74:16:c9:89:c1:a7:61:f0:a4:ca:9e:35:4b:7c:a3:de:4b:
         a6:ad:39:47:81:bf:91:29:35:c6:4a:48:9d:1f:69:18:38:9e:
         44:3a:21:d1:b4:cb:c6:87:56:bc:7d:72:2a:50:bb:75:d9:65:
         08:60:58:16:68:c1:e9:d6:4b:bf:a9:62:4e:80:77:55:80:53:
         97:ff:67:fb:28:21:69:da:ec:0c:b4:2d:b2:87:d2:2b:a5:16:
         64:8d:c6:b9:e9:68:e0:47:7b:1d:8f:d7:8c:3e:0a:6f:f6:9b:
         ab:ad:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:31 2024 by rpki-client on console-ams.rpki-client.org