Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa
File:                     b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json)
Hash identifier:          mObINJlsH0001kZYk5IQgzoCb/Eyz+bMKFUXfTTP41k=
Subject key identifier:   CC:F7:9E:B5:31:14:A8:E5:5D:92:B6:0B:3D:60:5C:08:D7:0D:16:49
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285847D29F5601A950CC2A6EC40770
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     21949
IP address blocks:        199.45.164.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:56:01:a9:50:cc:2a:6e:c4:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=6d8d1a5b-75d0-42a0-a1f4-7aa122cb4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:29:52:f8:6b:dd:94:65:f5:9a:7a:9e:9c:
                    38:7b:b4:b2:93:33:e7:12:d5:c4:43:20:bf:04:10:
                    89:4e:94:e5:f4:57:1f:1e:34:b9:d2:48:30:08:ba:
                    ba:02:0b:57:0c:74:88:ab:4d:aa:7a:d4:60:77:0d:
                    41:e3:cf:2b:bf:32:98:6d:e8:e0:21:59:45:a1:73:
                    e6:cf:31:16:ce:8f:95:bb:57:c2:07:24:23:29:43:
                    76:f2:1c:23:1a:60:32:52:f4:22:85:a3:38:4b:c7:
                    a6:86:8e:e6:a3:34:57:50:ed:5b:b1:82:e6:62:03:
                    93:7a:ab:62:67:fd:96:97:63:3c:38:0c:d2:fe:e9:
                    f2:d1:35:7b:95:05:1c:dd:33:05:15:58:5d:ad:60:
                    e0:8c:f6:6d:d8:61:0e:c7:ce:e9:d6:cd:15:6a:b2:
                    5e:8e:3d:ef:e4:80:43:64:7d:53:bf:1b:b8:6b:4f:
                    4e:39:79:89:17:ab:83:89:94:9e:2f:e3:fc:bb:6f:
                    a5:86:0e:30:53:d0:66:1c:cc:91:27:18:a6:37:e1:
                    15:07:66:81:0d:5d:2c:b3:e9:81:9b:60:bc:de:57:
                    4d:1f:2b:ca:53:42:ce:2e:3c:f0:a7:d9:70:a4:90:
                    fc:59:a9:0b:e9:46:b9:47:e8:7e:7c:2d:cc:e5:7d:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:9E:B5:31:14:A8:E5:5D:92:B6:0B:3D:60:5C:08:D7:0D:16:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:be:d5:e0:66:8d:af:d9:1d:b0:8b:67:ec:ef:4f:9e:28:
         42:be:2d:22:15:f5:7e:cd:a9:32:26:e3:02:23:8a:c6:a0:d4:
         9c:be:16:f4:ec:ca:81:a2:25:4a:9c:44:16:ac:4c:d0:81:1d:
         b9:e3:ca:3e:97:2a:83:52:82:80:34:3a:e6:e8:18:3d:35:a8:
         7f:da:10:6d:4c:2a:b1:d0:fe:ce:ba:5a:4a:81:d7:67:29:81:
         52:35:e9:1e:a4:75:ab:1d:23:17:74:8a:1a:ee:ba:2c:b5:34:
         95:40:1a:fe:e9:1e:d0:ef:f7:a6:45:e5:5e:2b:69:d0:61:42:
         16:69:96:c2:a5:9d:f0:5c:5d:f0:bc:78:4f:ac:be:58:8c:c8:
         1c:d6:60:95:a0:9f:6c:a4:b5:99:d9:21:b2:98:c3:f9:66:be:
         33:28:cb:72:da:23:77:bf:35:33:a8:a6:ba:c5:1b:b6:ec:d9:
         e0:77:ba:f1:cd:fc:b3:d4:b9:8e:a4:5f:dd:dc:6b:4f:68:0f:
         5a:bd:ec:04:5b:6f:9f:13:52:f6:3a:22:d1:ac:dd:f8:69:12:
         8d:a5:05:b7:dc:9e:ca:69:5e:e2:73:75:68:e9:91:cd:14:fc:
         ac:6b:85:3a:11:e6:8e:00:7e:46:92:42:be:c6:07:07:39:1b:
         7b:12:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:49 2024 by rpki-client on console-fra.rpki-client.org