Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
File:                     bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json)
Hash identifier:          XxKlsIh6/Jo7XOjlRUbUSQMTLFm2NUhR0J1/+6os6iw=
Subject key identifier:   BD:BF:E0:80:A6:1A:15:81:45:15:2E:89:99:41:B1:47:27:72:8B:82
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F432858471B51CF59C99AE7C96FA48F00
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
Signing time:             Wed 04 Sep 2024 22:11:37 +0000
ROA not before:           Wed 04 Sep 2024 22:11:37 +0000
ROA not after:            Tue 03 Dec 2024 23:11:37 +0000
asID:                     23467
IP address blocks:        152.38.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:51:cf:59:c9:9a:e7:c9:6f:a4:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Sep  4 22:11:37 2024 GMT
            Not After : Dec  3 23:11:37 2024 GMT
        Subject: CN=cc393564-0bc7-45b6-851b-202fa1240cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:b9:37:67:2f:e6:66:3e:96:94:5d:00:56:
                    b5:64:4e:1d:4f:0f:2a:6d:d7:d8:57:46:21:6d:42:
                    b8:4b:01:cb:34:7c:a4:b6:f4:5a:f2:1f:84:9f:3d:
                    dc:5f:50:02:d8:1e:be:47:d8:66:07:06:74:75:e2:
                    4d:29:24:7f:18:f2:38:0e:93:e5:e6:32:c0:27:9e:
                    01:05:59:0b:ed:18:9f:84:ff:74:61:c3:ef:88:a1:
                    13:3b:2b:31:c7:81:56:ee:3a:af:3e:09:0b:47:0e:
                    6c:ae:e7:1c:aa:08:f0:e4:1c:c4:7a:4b:ea:b7:14:
                    c3:5c:b4:76:aa:e7:3b:de:87:5d:7a:18:03:90:f2:
                    8e:46:bf:4d:8c:af:02:eb:b9:bb:85:48:d7:7f:ea:
                    f8:4a:94:0b:8f:6c:dd:14:3a:8c:d2:28:f3:de:82:
                    42:37:3a:ae:1e:29:eb:2e:58:84:96:e7:4b:19:c3:
                    91:ee:dd:3a:91:9d:58:42:19:e8:97:53:1b:23:3f:
                    13:35:22:90:c0:cc:30:1e:b3:24:10:23:0e:4c:da:
                    f5:b4:1e:6b:ce:63:44:0a:67:45:65:46:e7:5c:d7:
                    5c:a1:1a:27:74:1f:df:68:7b:01:86:6d:3f:6f:9b:
                    05:7e:4d:2e:5f:1a:3c:ce:0f:e7:3e:89:be:60:60:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:E0:80:A6:1A:15:81:45:15:2E:89:99:41:B1:47:27:72:8B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:01:7c:8f:36:76:e0:d7:99:23:f8:e9:1b:35:2b:b1:ff:
         16:54:bb:3d:e7:e0:22:24:1e:99:8a:88:9e:b8:88:e9:9c:b9:
         7e:3d:fa:8e:cd:5c:2a:39:8a:e5:a5:bb:8a:29:c5:4e:c4:1a:
         11:99:9d:6b:88:0f:81:04:9a:ff:36:a0:59:52:7c:03:c2:96:
         a2:9d:05:e8:e8:72:15:4f:fc:ed:30:b2:0b:ef:49:f3:18:33:
         ff:a5:5d:aa:7f:41:41:41:ab:5a:e9:94:af:42:42:04:54:98:
         53:18:3c:87:33:f1:f7:e8:49:d4:07:82:f0:f6:f7:77:9e:ae:
         83:02:c1:69:3d:2f:63:d0:9e:b2:72:52:68:59:90:34:dd:68:
         46:23:ec:f8:2d:fe:e7:29:5a:8e:d1:b0:87:be:b9:92:4f:7f:
         05:a0:66:ba:b3:95:77:5a:60:3c:74:8a:c9:ed:fe:36:fe:bf:
         f2:f9:87:99:cd:22:41:3e:96:a4:1b:5d:46:fe:e9:a0:ac:8e:
         bb:29:59:24:68:51:63:4b:41:17:38:08:6d:10:48:33:f0:d3:
         bc:e8:e6:b3:f9:22:2e:83:d1:6a:5e:77:cf:c9:8e:f4:68:43:
         e7:b6:80:30:e1:eb:03:00:4b:d3:20:51:03:99:5b:c4:74:e0:
         15:c7:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 02:46:32 2024 by rpki-client on console-ams.rpki-client.org