Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/549a814c-60c7-3b65-8828-8a7c80161703.roa
File:                     549a814c-60c7-3b65-8828-8a7c80161703.roa (raw, json)
Hash identifier:          6QqeghtGbfsvTZZeYXAXXRXcH9Z9uz4T6sOF35/rt+8=
Subject key identifier:   C5:04:E1:D9:1E:BD:72:11:C4:0F:6A:FE:F7:44:64:85:6C:80:07:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847EE7D502BCCDDDAA9E6D12180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/549a814c-60c7-3b65-8828-8a7c80161703.roa
Signing time:             Tue 19 Nov 2024 13:34:50 +0000
ROA not before:           Tue 19 Nov 2024 13:34:50 +0000
ROA not after:            Mon 17 Feb 2025 13:34:50 +0000
asID:                     396594
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7d:50:2b:cc:dd:da:a9:e6:d1:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 19 13:34:50 2024 GMT
            Not After : Feb 17 13:34:50 2025 GMT
        Subject: CN=f2954313-55bd-42a6-854b-0bcc7db895b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:64:92:5d:39:cb:99:6b:af:dd:4f:7a:0e:
                    ba:69:ed:d2:df:9c:22:3d:f8:8a:6d:dc:c6:9b:9d:
                    a8:b7:57:53:ad:16:01:e4:12:03:61:67:91:53:3c:
                    49:e3:ce:fb:55:22:04:5a:09:d9:a3:76:92:a8:db:
                    6f:43:4f:5a:d0:59:68:ae:c4:b3:6d:3a:59:9f:59:
                    12:99:ea:e8:68:5a:fc:8e:41:ce:f1:45:78:b9:12:
                    7c:6b:2e:6e:cc:92:4c:af:9d:4f:f0:a3:4e:98:35:
                    20:30:11:eb:dc:10:a5:3f:a5:b4:12:08:6c:b3:e0:
                    13:41:82:ea:29:27:de:07:fe:39:fd:a6:2e:e6:00:
                    9d:db:bd:41:d8:41:b0:66:8f:33:11:18:04:3b:a2:
                    25:45:d4:30:5e:da:91:53:e8:cd:58:55:a7:5b:08:
                    ae:5a:e4:15:18:f7:6d:b8:9e:d2:7d:01:6c:fa:86:
                    88:23:d3:c0:62:c3:c8:6a:07:d1:42:80:f1:d8:56:
                    bb:a2:d1:5d:2c:d4:35:41:7c:ec:1b:70:1f:08:4c:
                    3f:4a:5f:af:f5:c3:c6:40:6d:02:46:f5:d8:ce:f7:
                    9d:43:56:11:f5:1a:de:9e:5e:3b:b2:d7:f9:7e:fc:
                    fd:b1:a8:e6:f7:67:9b:47:4e:e8:3d:09:f6:3c:e4:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:04:E1:D9:1E:BD:72:11:C4:0F:6A:FE:F7:44:64:85:6C:80:07:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/549a814c-60c7-3b65-8828-8a7c80161703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:c9:8d:16:9a:76:26:01:95:22:44:ed:53:f6:16:a5:7f:
         df:78:c3:e2:ac:db:8e:83:2a:16:26:e3:01:c1:88:16:6b:d5:
         ba:05:9c:6f:f5:89:1f:6d:1f:28:8f:c9:a9:a2:80:a5:ff:cc:
         3c:2b:33:15:93:ad:65:59:c3:56:a6:e6:a3:29:fa:b0:64:90:
         7c:4f:65:ce:d4:6b:ea:c9:4f:cb:2d:ff:42:72:34:12:34:64:
         b6:5b:9a:4b:5e:cb:1d:bb:7c:aa:05:31:9e:e4:55:a5:58:38:
         c3:89:d3:cf:13:8b:87:c5:ff:75:53:8b:33:80:41:05:cc:19:
         0b:b0:9b:17:5a:13:2f:fd:7f:75:f0:9d:83:4b:9a:c8:0c:9c:
         79:8d:7d:53:13:a0:2b:5f:af:4e:de:23:50:a6:e9:1e:f5:9b:
         02:27:47:97:a7:5d:fa:8a:80:a3:92:1a:a2:21:46:72:e2:96:
         4c:ef:9e:df:30:bf:d7:9a:f5:91:ae:00:d9:0f:6e:05:a0:9b:
         38:8c:10:89:b4:d4:21:64:04:f1:6b:42:a5:5a:10:06:8b:39:
         2e:1e:98:46:53:b9:4a:bc:bc:ff:5e:b8:2f:18:33:8a:34:f8:
         26:a8:17:93:82:02:3f:28:34:d4:fd:89:2e:73:3a:b4:24:a6:
         ee:53:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:35 2024 by rpki-client on console-fra.rpki-client.org