Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa
File:                     6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (raw, json)
Hash identifier:          9aEmnb70l8hJH0NAuSgRvP/32cpDPUz0yueUvt8yL1A=
Subject key identifier:   B7:54:B1:46:B2:C0:34:04:EC:C3:A7:B9:FE:5A:4A:D5:02:BC:0A:1E
Certificate issuer:       /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial:       010D0C9F432858475910BAEE43ABF19329637100
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     22773
IP address blocks:        134.195.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:ba:ee:43:ab:f1:93:29:63:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=fe869b8b-3701-4af1-a11a-81a77531152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:fc:c8:39:af:df:70:e7:ab:db:5b:04:c5:
                    be:9c:e4:ff:8f:b1:74:68:74:9e:19:b9:ab:73:7a:
                    1a:5c:21:4b:24:70:20:a0:68:24:5d:e0:02:58:bb:
                    f3:5d:43:d5:b1:b3:8b:45:d6:d9:6b:46:f9:55:12:
                    84:94:4e:9e:ba:2c:13:df:05:fd:8c:f7:74:68:69:
                    bc:14:59:7d:47:41:e7:67:f5:c8:cd:b5:a0:85:a1:
                    ce:88:20:93:58:de:24:85:1e:90:ed:15:71:58:88:
                    15:98:6b:ed:66:16:ed:41:a4:ca:12:6d:17:00:07:
                    4e:3d:dc:d5:7d:0e:fb:c4:4f:a7:fd:aa:fc:a8:e2:
                    30:8e:4a:4f:25:d0:03:da:6f:73:8b:e8:e0:bf:df:
                    a8:fe:03:a6:1b:60:fb:c6:72:73:64:60:64:0f:25:
                    dc:f4:a0:08:fb:03:fa:b7:7c:0a:d3:4f:fc:a7:b8:
                    4b:f5:7e:71:a2:b8:01:25:25:0b:10:42:f6:cb:d9:
                    7c:e0:ec:5c:bd:15:0d:0e:b5:3a:91:50:55:c5:ee:
                    c4:5f:f0:4e:fd:b1:6e:20:37:94:7b:60:e6:1a:c7:
                    bf:40:81:9c:c1:8b:a1:34:57:44:67:ce:26:5e:24:
                    8f:d7:75:38:19:fd:39:76:db:a3:5a:8e:8e:b0:c9:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:B1:46:B2:C0:34:04:EC:C3:A7:B9:FE:5A:4A:D5:02:BC:0A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl

            X509v3 Authority Key Identifier:
                keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:88:c7:ce:93:9d:cb:d0:e9:07:31:9b:12:1b:7a:e7:9b:0a:
         40:f7:4c:85:00:a1:25:4f:4b:dc:04:40:87:f0:72:12:4e:fd:
         bd:14:8f:43:e2:0c:82:40:2f:d7:ee:2c:79:f7:e1:c2:d5:3e:
         94:52:5a:40:e7:00:9f:3e:ea:10:29:89:db:0a:5b:ca:a2:77:
         87:c1:26:46:45:ff:d4:d1:04:c2:4e:ae:c7:13:e1:8e:8b:14:
         aa:9f:c7:91:e2:bd:c1:30:03:ee:c7:1a:da:81:db:57:66:88:
         ff:d3:1a:7a:88:c9:b2:8a:20:46:71:2d:b7:6f:f8:07:44:57:
         6d:a9:50:b9:c2:31:c6:68:12:47:16:df:3c:aa:b3:10:3b:0a:
         75:06:95:9e:3b:3c:1d:c5:0a:d0:16:35:62:d0:62:b9:fb:7f:
         c5:72:5a:08:1c:90:7a:61:ce:b3:39:a9:e4:d5:ee:ee:af:3e:
         7a:bc:d4:6d:9b:ae:da:cb:b1:93:41:68:14:be:2e:64:46:5a:
         4e:dc:5b:02:18:48:ae:4c:95:49:ab:81:c0:30:ce:4a:a0:62:
         f4:92:aa:8a:a4:25:3d:bb:40:70:34:d1:e9:48:5c:17:32:0b:
         3a:0c:61:8e:35:23:cc:4c:1d:de:42:ff:c6:d2:26:a1:fa:87:
         f6:3a:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:47:24 2024 by rpki-client on console-ams.rpki-client.org