Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
File:                     00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json)
Hash identifier:          h6FPmb8ahFhh43N8G07EqpVBACgSJ3mqOzG3w4Chh5I=
Subject key identifier:   07:0C:5D:32:E8:78:F7:4F:41:7E:04:72:E2:53:06:6D:14:91:A7:DC
Certificate issuer:       /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
Certificate serial:       010D0C9F4328584769D0D58641DC28138BDBF400
Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     22571
IP address blocks:        192.131.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d5:86:41:dc:28:13:8b:db:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=139858ad-860c-4cc5-89ca-13ea1c6367f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:7f:c9:84:30:e5:96:55:0f:6b:0d:bf:2d:
                    c0:25:e2:36:8f:dd:57:f8:f2:e4:3c:17:d8:23:4e:
                    08:e9:c5:52:f7:e5:07:10:34:ca:4c:a4:42:67:bb:
                    07:c5:a0:59:d9:aa:49:14:4d:9f:07:14:f6:2a:0a:
                    51:fe:27:68:31:d4:a0:c4:f5:81:b2:89:86:40:af:
                    a8:fb:11:cd:0d:e8:d0:9e:76:b9:fd:21:97:24:9c:
                    45:ba:a9:06:e7:9b:db:7f:3d:eb:60:ec:97:81:57:
                    9d:21:4a:6b:01:cd:6e:92:34:70:79:20:c0:2a:6d:
                    06:69:b0:d9:0e:7d:06:22:c4:2b:ce:d4:df:08:81:
                    08:c0:bd:d1:89:16:81:1d:4e:3f:95:9f:54:dd:71:
                    a1:4e:27:51:19:dd:0b:bd:3e:5e:f1:32:32:c2:61:
                    a8:a1:d7:ce:7a:4f:01:c5:a8:64:68:6d:64:b5:cc:
                    9c:11:9b:da:bc:b9:bc:b1:49:6c:19:ba:2e:f5:9d:
                    a0:c8:e2:59:66:2f:96:96:44:48:ec:aa:24:43:d2:
                    79:ba:6a:28:3c:37:0f:2c:1f:fd:69:66:cb:81:83:
                    06:2a:ac:89:27:3a:e1:06:3b:4c:c1:1b:6d:11:d6:
                    ef:53:76:39:02:6e:5f:db:61:a2:57:db:8f:4d:32:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:5D:32:E8:78:F7:4F:41:7E:04:72:E2:53:06:6D:14:91:A7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl

            X509v3 Authority Key Identifier:
                keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:59:5f:a0:a7:db:f7:f3:af:ca:46:d3:f4:70:a5:76:a2:
         c2:7f:5b:1f:b5:e0:10:88:c1:7e:a6:97:79:e0:a7:5f:f0:1b:
         e5:d7:72:fc:fc:d8:ec:93:27:33:9c:76:1a:cf:41:45:85:59:
         23:7b:1f:38:e2:27:07:93:01:2b:9a:df:41:47:9d:b5:6c:34:
         67:ce:3d:63:c0:df:21:29:c6:d8:8b:e7:6f:b0:30:65:b0:a4:
         a5:14:08:cc:2e:0c:d5:17:fe:e5:8c:4f:cd:1d:11:f1:49:59:
         1a:3e:46:4d:1d:a6:31:54:c7:74:d1:74:cb:89:98:f3:94:55:
         18:1b:ec:23:80:2b:07:be:a3:75:a0:0d:87:d3:31:95:e4:55:
         9b:38:4a:d5:ac:29:05:28:d7:cd:6b:73:f7:7d:ad:bd:ab:47:
         f8:66:87:cc:3f:0e:3a:32:1b:af:fd:22:8c:39:1b:77:1e:2e:
         a8:84:72:bd:af:f3:aa:2f:35:32:fc:93:02:2a:4b:47:5e:18:
         b4:e4:e2:3e:15:9e:23:9a:9f:01:04:0c:e1:71:58:c3:1c:32:
         f2:e6:e5:01:c0:64:c2:56:4c:2f:e5:6e:90:0e:d1:5d:6f:87:
         2a:e1:db:2f:fc:87:2b:a3:fd:8e:86:9a:0e:69:5d:1c:9a:ca:
         85:f1:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:21 2024 by rpki-client on console-ams.rpki-client.org