Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa
File:                     752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa (raw, json)
Hash identifier:          bkcb6QdLNs6S9+cLzVV/nD+mV/nDwLn5MnQv2/bcug0=
Subject key identifier:   08:1B:BF:C5:E8:92:75:E2:9C:16:59:87:3B:0B:B2:D8:E3:B9:76:3F
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285844D17FBF6AD7EBF3BCE9897504
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        216.157.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:bf:6a:d7:eb:f3:bc:e9:89:75:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=4d2273b1-d79b-47a7-8ead-a55f4b037f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:b6:31:17:ba:e0:98:14:5c:ca:df:1d:c2:
                    ae:06:61:6e:79:6b:56:c0:63:f1:5c:9d:49:03:1d:
                    c0:a7:15:05:2b:8d:51:e2:4b:b6:9c:02:0a:a0:7a:
                    0e:41:30:57:6e:e4:fb:4d:bd:bc:03:64:81:e1:f1:
                    f4:06:e9:62:0f:8c:9c:ee:53:96:2a:2d:64:f9:03:
                    36:42:82:5b:98:96:11:7f:5c:1f:ce:d0:8b:f1:5c:
                    6f:74:44:89:0f:2f:44:14:4c:ac:5c:cd:0a:61:7d:
                    9a:aa:61:37:61:ae:de:3a:65:f1:08:7e:e5:a1:78:
                    5e:ca:69:72:fe:7c:4a:8b:b9:e0:fc:e7:a8:33:91:
                    d2:75:50:05:cb:dc:61:73:01:a0:be:b9:21:c3:b8:
                    9b:0c:70:95:58:1d:48:c9:90:d7:a4:e7:f5:f1:ad:
                    bc:fe:2b:1e:04:7a:51:5b:44:70:5a:8f:f5:ba:9d:
                    2b:52:07:f7:31:65:78:4b:cc:8c:35:e2:ad:ee:e3:
                    81:fc:af:fa:d2:25:19:52:d6:44:37:34:b1:fa:65:
                    c8:83:81:20:45:fc:8c:4e:ac:01:c2:a1:45:d4:e9:
                    5d:92:78:7f:12:02:bb:b9:a8:03:f6:1d:e7:d5:66:
                    be:bb:a5:84:2a:23:e2:f7:4e:e9:f4:d8:2a:76:f0:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:BF:C5:E8:92:75:E2:9C:16:59:87:3B:0B:B2:D8:E3:B9:76:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:52:cf:d1:cb:eb:e0:38:45:6d:cf:a9:f1:ab:e8:21:a3:
         71:43:e6:68:b4:ed:04:67:4c:44:b6:33:81:00:60:c7:e9:d4:
         2f:7f:99:2a:2f:03:a7:32:90:3e:a0:37:a1:de:33:03:78:27:
         08:02:7c:78:68:8c:de:3c:81:0b:56:ce:d3:cb:ee:18:2c:93:
         c3:58:ed:b7:dd:7c:97:2c:95:92:f5:68:dd:88:1d:c5:4e:a0:
         22:77:45:e8:e6:3f:4b:75:a6:75:df:fe:8a:6d:f6:79:ba:ce:
         b8:43:d8:9d:8a:03:42:c9:be:b7:4a:55:73:e9:5e:eb:59:d1:
         5d:01:e7:15:b8:67:a1:25:28:ab:be:76:c1:f5:fe:a6:e8:5e:
         71:76:28:5f:5e:c5:42:78:23:34:52:08:28:ea:f7:bf:bb:28:
         5b:04:fc:fe:b9:0c:04:b3:c8:78:19:9d:39:8c:78:8a:ca:08:
         c5:90:4c:a6:cf:bd:8c:29:f9:87:56:19:72:f5:20:ea:f2:ff:
         33:c4:0b:51:85:48:d0:96:2f:56:09:58:25:42:6c:47:6e:4c:
         e9:c2:8d:2e:01:87:58:06:df:03:0f:96:d7:29:d8:7c:54:b4:
         bc:97:9b:f7:90:56:d3:9c:f0:aa:f1:41:3c:98:e9:2a:f1:e0:
         c2:76:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:57:33 2024 by rpki-client on console-ams.rpki-client.org