Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa
File:                     994d3c02-64be-3e74-aad7-84b3e0a5a022.roa (raw, json)
Hash identifier:          owoU1Ar3q5B4E4pwyA7upzAd2JbI7t1GKFyYgHnajlM=
Subject key identifier:   B9:D4:69:A9:EE:2C:5B:90:1A:8F:51:51:32:18:5B:DD:D1:13:EB:65
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155025EABA20A30B1681280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        151.213.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:02:5e:ab:a2:0a:30:b1:68:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=09f04cee-3536-4cda-9582-32bbcd9317cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:fa:18:c4:b9:c6:92:9a:62:fb:c4:c1:be:
                    44:91:9a:36:50:19:ea:f3:bb:d9:b7:7d:5c:91:fe:
                    87:ad:18:ae:b7:70:81:68:8a:e8:55:b0:1e:12:40:
                    01:c1:49:05:a7:33:74:09:1e:a6:44:23:35:10:d8:
                    bc:86:e4:9f:02:b6:b4:f7:bd:ec:ca:5e:0b:6a:7c:
                    8f:ca:c5:d6:88:43:46:53:a5:e1:15:8a:e3:f8:5b:
                    c8:2f:f1:ea:ec:9c:1e:5a:ce:0c:56:d7:a5:ab:50:
                    f7:2d:c5:98:d8:88:eb:54:9f:9e:d7:84:0d:c1:c3:
                    76:3b:b2:11:0d:ed:9d:c7:54:0f:b8:11:c3:d2:e0:
                    12:a2:16:f9:ca:a3:f1:53:68:90:a0:67:58:65:a3:
                    3b:21:3a:87:46:da:57:ba:e3:3d:f7:7d:15:7e:da:
                    0c:9d:f3:d8:d6:c5:0b:fa:9c:90:4e:3f:95:92:2e:
                    c0:9e:1a:7a:31:d0:01:10:5a:1d:ad:03:ab:3f:47:
                    47:1f:a6:11:58:e0:1e:56:9e:b9:59:b5:f0:69:eb:
                    15:b1:96:1d:f7:56:c0:68:38:d6:2e:34:a6:61:09:
                    f4:ff:a1:b6:8b:5d:7c:0e:e5:af:63:16:fe:7f:b6:
                    63:1e:63:fa:78:e3:22:b9:45:9d:4d:53:ca:17:b7:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:69:A9:EE:2C:5B:90:1A:8F:51:51:32:18:5B:DD:D1:13:EB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994d3c02-64be-3e74-aad7-84b3e0a5a022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:51:c6:95:2e:6d:3b:9d:d2:fd:9c:f6:7e:b7:a9:69:61:
         2a:0e:88:06:ee:69:9a:6a:55:f0:5e:3b:c5:ef:6d:17:fa:1a:
         cf:fd:55:da:3f:73:ab:04:a6:82:65:03:2a:be:4d:e1:f4:59:
         54:ed:72:80:f2:e0:90:26:0d:f7:1b:c0:73:a6:25:9f:06:5c:
         73:79:f1:71:0b:f9:dd:08:8d:57:49:65:83:fa:ac:64:f8:e8:
         e0:13:2c:70:1f:89:ee:50:d4:62:15:3f:39:50:8b:15:60:9e:
         a7:7f:27:08:5f:1f:da:71:b1:7a:36:ab:98:27:70:e7:59:23:
         b6:aa:b4:1a:1f:a6:f6:21:31:86:e8:6e:ed:5d:c3:7b:01:62:
         e8:a8:ec:8b:4d:cb:f8:e1:3a:23:54:07:54:1b:9e:4a:6d:40:
         ac:00:fd:0b:39:63:37:17:88:c3:35:4a:11:4e:d1:e8:f2:fb:
         42:1a:bf:57:55:1d:83:af:ae:a9:8e:d1:92:e0:94:11:57:a7:
         d7:66:f1:80:6d:30:e7:41:e5:ce:ea:b6:f5:05:47:02:1e:09:
         c6:13:51:ff:0c:d6:a6:8b:04:d7:bd:4b:dc:f7:62:28:e4:49:
         0c:0c:f7:c5:b0:51:2e:32:9c:6c:92:d3:68:95:1c:c1:bd:ee:
         46:69:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:44:01 2024 by rpki-client on console-ams.rpki-client.org