Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
File:                     9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa (raw, json)
Hash identifier:          M71PWz4d2qNov3zMVaBxjCqMBat4Z8u745h7HncZUrE=
Subject key identifier:   5B:20:37:23:13:5E:14:16:EF:37:9E:0E:FE:73:46:D0:CC:3F:90:8C
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845D0D39DF94B717ACF72D45180
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     18434
IP address blocks:        156.55.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:9d:f9:4b:71:7a:cf:72:d4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=49e59fb9-3f2b-44e5-ae4d-131ce240e2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:8f:47:ce:f7:bc:72:54:a7:5c:d7:22:0d:
                    d1:22:83:b2:97:d1:18:c9:35:62:a3:b3:54:ae:3b:
                    38:b7:c8:0e:c9:40:5c:6d:d3:f9:12:e2:f8:8d:2f:
                    ec:c8:e3:79:47:8b:ae:19:79:ec:70:58:a7:ac:32:
                    2c:f3:cb:a8:dd:1e:9c:3e:f6:e5:15:e2:ea:6b:1c:
                    8a:25:d8:8e:e3:ed:08:36:30:07:52:86:62:28:6d:
                    ba:e8:ac:5c:71:4b:bb:fd:84:a4:61:ce:d6:fb:ef:
                    65:cf:d2:56:99:8a:5b:66:4c:b7:77:30:4d:09:af:
                    ef:7f:a4:fd:6b:61:54:85:29:4b:48:0c:46:f6:07:
                    2e:7a:16:91:f5:5d:81:af:eb:e3:5c:88:8b:50:41:
                    9c:b3:ad:63:3d:ff:54:4f:bb:a9:c9:48:ff:62:7f:
                    66:e1:14:4c:22:0d:b5:a1:b7:d9:d2:b0:2e:13:2d:
                    56:73:06:13:4c:df:20:61:ea:b7:80:c7:0e:ca:f7:
                    41:77:f5:55:41:7c:e8:65:02:af:54:60:5c:a8:83:
                    29:34:be:f1:5f:78:98:ec:bc:13:78:f1:94:4a:1f:
                    93:61:e1:7a:62:b5:4b:44:5f:89:90:f4:d6:2d:da:
                    26:ef:51:47:38:dc:b4:67:83:93:20:a1:de:55:d2:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:37:23:13:5E:14:16:EF:37:9E:0E:FE:73:46:D0:CC:3F:90:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:ab:78:64:aa:fe:e0:0a:45:e9:26:69:30:5a:ac:45:27:
         ec:81:03:f8:70:9e:43:2e:35:e1:53:48:28:44:46:6c:b5:bf:
         33:4d:e4:92:97:5c:cb:ac:83:6d:dd:5a:fd:5e:a0:40:a9:d9:
         d3:17:33:db:00:19:0a:dc:0b:cf:4f:2f:d6:06:79:1d:94:74:
         e3:e1:17:fe:bd:a0:a1:11:80:af:8c:67:a9:22:b3:56:10:cf:
         1e:09:37:d1:d9:3f:c4:fe:06:eb:e9:ee:c2:68:5c:89:40:15:
         11:0f:b5:d8:3a:b6:aa:01:53:45:51:fc:7d:f2:35:d1:43:d0:
         fb:2a:9b:8b:8e:70:ac:f6:78:f7:d1:f0:de:19:35:96:98:83:
         21:0e:3e:29:1d:16:5b:ac:56:fa:7d:02:5c:a1:52:f9:a3:8f:
         72:7d:b8:32:fe:dc:78:67:c1:0c:6a:16:59:a9:9a:0e:c1:6a:
         53:16:09:43:01:8f:fc:0a:5d:87:a1:50:af:3d:99:0e:3a:9f:
         9b:80:fd:9a:70:1e:55:73:ec:8f:63:93:0f:7c:38:5e:0f:12:
         84:be:28:b4:52:ae:09:63:38:4d:5d:b6:64:49:e6:11:92:f1:
         99:7f:e5:91:82:24:6b:51:b1:53:d8:89:04:33:3e:a1:24:ab:
         dd:e2:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:27:02 2024 by rpki-client on console-ams.rpki-client.org