Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
File:                     0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa (raw, json)
Hash identifier:          7KvPFPY6dO19gnimvMSM+ylEXiR+MILhv128wmN04us=
Subject key identifier:   66:B8:78:5D:A7:54:72:C9:D3:AD:21:AA:6C:41:15:91:D0:F3:59:12
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847362B5EE4B6E5401B0AF0D380
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     142032
IP address blocks:        107.151.240.0/23 maxlen: 24
                          198.44.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5e:e4:b6:e5:40:1b:0a:f0:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=92c3340a-950d-40a6-b97f-7f61b6f89384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:d0:36:4b:87:f5:a0:7d:4d:e0:a5:3b:34:
                    3b:0e:89:76:fa:e2:f7:0c:b2:d3:47:15:e3:c6:b0:
                    dc:34:13:e3:23:8a:f5:73:17:45:a6:23:b4:b2:9e:
                    5a:ba:44:25:50:0b:54:00:26:7d:63:af:66:e2:11:
                    11:f4:33:ab:64:d9:6c:32:64:34:36:74:17:4b:57:
                    39:af:8a:6e:26:90:84:b1:66:66:7b:bf:8b:ed:95:
                    94:95:19:72:cc:32:84:e2:de:f7:8a:5c:9e:52:80:
                    11:1a:2e:db:42:55:dd:d0:1f:78:bc:a2:ba:3e:d3:
                    a3:fa:c3:ca:8c:df:d8:0e:6f:fb:cf:6d:90:21:8f:
                    90:45:f9:12:bf:22:88:01:9b:18:f1:98:6e:ff:44:
                    85:f5:81:b6:91:32:05:16:7d:94:ce:f6:a6:73:f6:
                    05:aa:83:ba:ee:d9:14:61:27:47:39:60:b6:aa:a1:
                    6c:21:ee:51:7e:fc:70:a4:13:5f:c1:62:19:c9:fa:
                    0f:34:20:68:4e:da:30:fb:b1:5c:40:23:dd:43:a7:
                    7b:d8:94:4d:ce:3a:df:d1:ee:76:41:88:63:d3:d1:
                    fd:64:a5:df:19:3d:7e:4b:da:33:51:2c:3a:85:a8:
                    c9:9e:7b:bb:27:b5:6e:5b:d3:72:dc:e6:14:dd:cf:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:78:5D:A7:54:72:C9:D3:AD:21:AA:6C:41:15:91:D0:F3:59:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.240.0/23
                  198.44.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:ae:5b:4b:a9:91:96:b7:4e:cb:33:2b:85:70:5f:52:ae:
         a2:3f:07:f1:ba:93:89:18:4a:04:d6:50:b8:73:b1:f5:95:9e:
         ef:67:36:dc:98:69:4a:7d:78:48:f0:30:d8:35:51:97:3e:e2:
         f2:a8:e1:c1:c2:75:86:88:12:1b:7f:70:ca:60:11:cc:ea:84:
         77:ca:18:c3:16:21:54:aa:34:b8:37:cf:81:60:e6:40:3f:82:
         57:28:6b:95:b1:3f:77:ea:ab:f2:47:94:57:76:3e:0c:d5:20:
         df:05:40:03:53:d0:13:6d:2c:49:e8:5b:c1:73:9a:3f:5b:97:
         91:52:8f:b0:8d:18:79:49:44:98:f6:5b:a5:50:b5:b9:94:45:
         86:0b:35:d4:75:30:07:f1:b3:9a:63:d2:27:e2:44:95:91:e2:
         83:07:0e:80:f6:c2:f9:db:c6:79:7d:65:5c:45:5d:11:d1:ee:
         2c:4a:44:49:57:e6:a0:70:f9:7d:87:15:d5:bd:9b:28:a1:06:
         49:0d:43:f8:0a:29:fd:12:3c:c4:7d:cb:f0:50:c8:56:27:7e:
         4c:99:c9:88:fc:ca:23:06:2e:fc:9a:e1:f8:1e:0e:81:51:53:
         fb:e8:41:e2:6f:2b:60:ba:4a:54:8a:c6:64:10:c5:26:72:6e:
         50:bb:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org