Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa
File:                     ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa (raw, json)
Hash identifier:          WDMFaMFbabLaAM5hvKu+FpKV89E/2jaOj0AaouQfp2o=
Subject key identifier:   AE:ED:CB:4B:04:C2:4B:F5:46:4A:BD:39:70:14:64:73:ED:AD:0C:8D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847EE7D5142FEE0AD0AAFC74A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa
Signing time:             Tue 19 Nov 2024 13:34:50 +0000
ROA not before:           Tue 19 Nov 2024 13:34:50 +0000
ROA not after:            Mon 17 Feb 2025 13:34:50 +0000
asID:                     396540
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7d:51:42:fe:e0:ad:0a:af:c7:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 19 13:34:50 2024 GMT
            Not After : Feb 17 13:34:50 2025 GMT
        Subject: CN=c39a8a83-4722-45dd-b160-2b2affd82577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:8a:e1:02:c6:10:96:c1:a5:c8:68:16:76:
                    ac:c2:c7:55:eb:fd:73:f8:1f:4e:d7:bd:b1:7a:a1:
                    b8:8a:c6:9d:9e:10:e6:0d:44:27:8f:9e:ae:29:bc:
                    9f:81:3a:07:d0:82:f1:ab:65:ea:f0:0e:8c:c8:c9:
                    50:29:1d:a0:72:9c:9e:c7:29:2c:93:7a:cf:1e:27:
                    40:24:d7:b8:68:86:34:ac:21:10:79:dc:6b:be:44:
                    3a:ab:b4:10:0d:c8:6a:38:87:8c:25:2a:17:87:54:
                    1e:e7:5e:83:bb:62:3e:a0:e4:a9:40:7e:07:3e:b8:
                    a9:14:d5:b4:8c:da:0a:f8:4a:bc:f5:b5:af:f2:9c:
                    c6:34:11:ad:ba:2f:dd:7d:08:66:c9:2a:52:12:a7:
                    6e:e4:2d:38:93:f6:0b:e7:47:62:1a:0d:3b:a9:ef:
                    c8:a2:b8:36:af:af:9e:ef:09:19:e1:12:b4:ab:ac:
                    ba:42:7c:1b:64:3c:82:aa:bb:36:0c:dd:5f:dd:db:
                    e8:f5:71:78:47:e2:54:c7:e7:94:52:28:bc:8b:39:
                    bd:87:01:f5:19:cd:68:4f:52:e6:a9:30:d9:0b:e1:
                    76:8c:77:12:22:a5:dd:db:da:f4:4a:d5:12:ed:25:
                    7c:4e:eb:34:48:4b:ae:49:78:c0:cf:9f:e2:03:23:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:CB:4B:04:C2:4B:F5:46:4A:BD:39:70:14:64:73:ED:AD:0C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:48:46:e2:3e:74:ec:b3:39:76:e7:d4:0e:34:7c:9e:ff:59:
         9b:20:45:14:b1:5b:bb:f6:a8:6d:62:6c:c8:71:ac:ca:c6:b3:
         91:7a:14:11:b0:ae:d5:56:ee:4d:bf:17:d9:ff:32:e4:f6:71:
         4a:f7:b5:5e:f0:10:40:57:e6:5f:20:13:57:f2:e2:61:5c:94:
         91:e7:ef:5f:26:45:57:3a:e6:7f:5f:ad:a9:29:5b:bc:2c:32:
         0b:ba:42:fe:be:6a:6a:58:08:df:d1:cf:1c:86:a1:b9:3b:cd:
         bf:e1:f5:88:a4:9b:cf:dc:47:aa:1b:2a:74:3b:07:c5:8a:63:
         73:8b:ba:64:f8:b4:49:77:9d:67:d7:50:f5:ec:7c:6d:1c:80:
         75:c5:53:96:fd:67:75:e9:31:6e:0a:47:8b:a3:c8:e2:56:f0:
         c2:78:b6:6b:8f:c9:8b:08:96:13:21:d1:78:97:26:03:cd:05:
         39:15:a6:e0:bf:b7:0b:5b:5e:2b:91:af:f9:a4:8d:38:6d:52:
         d4:07:76:2e:15:f0:68:cf:d4:ce:a4:d5:ec:2e:88:1c:db:7d:
         7e:f8:e0:ed:5b:4d:39:73:ed:dc:9f:ca:63:ca:6c:ae:57:f6:
         cd:8a:ba:d3:17:26:5d:a1:23:61:6f:c8:00:3d:53:0f:3b:f6:
         db:63:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:42 2024 by rpki-client on console-fra.rpki-client.org