Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
File:                     4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa (raw, json)
Hash identifier:          lzb6ypYinjkCNanixmP/S0C+db/nSyWtdLcTJ+41QqY=
Subject key identifier:   42:6B:11:62:B8:BC:C5:A9:02:A3:24:C2:AC:64:EF:25:00:BE:92:DF
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847B65070037B5043704C507CC0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
Signing time:             Wed 30 Oct 2024 10:39:08 +0000
ROA not before:           Wed 30 Oct 2024 10:39:08 +0000
ROA not after:            Tue 28 Jan 2025 11:39:08 +0000
asID:                     62610
IP address blocks:        107.151.208.0/24 maxlen: 24
                          107.151.209.0/24 maxlen: 24
                          107.151.214.0/24 maxlen: 24
                          107.151.215.0/24 maxlen: 24
                          107.151.218.0/24 maxlen: 24
                          107.151.219.0/24 maxlen: 24
                          107.151.222.0/24 maxlen: 24
                          107.151.223.0/24 maxlen: 24
                          198.44.188.0/24 maxlen: 24
                          198.44.189.0/24 maxlen: 24
                          198.44.190.0/24 maxlen: 24
                          198.44.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:50:70:03:7b:50:43:70:4c:50:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 30 10:39:08 2024 GMT
            Not After : Jan 28 11:39:08 2025 GMT
        Subject: CN=1076eee3-272a-46c4-a05b-d7e2aa1078b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:43:43:56:37:f0:d8:95:83:2e:86:93:c9:
                    16:74:e7:40:07:c4:c5:8a:d3:46:34:64:c8:cf:d7:
                    f7:04:51:26:94:3f:1e:0c:b3:77:4a:74:dd:3c:c5:
                    a6:5b:1d:80:36:b0:ab:a6:4d:67:5d:c4:8a:7f:38:
                    76:8b:b2:10:16:dc:2c:06:a6:37:b0:30:5c:c7:91:
                    3a:66:8c:fa:8a:47:b2:b1:f8:e5:c7:76:2e:c7:5d:
                    96:55:25:59:d4:e9:af:0e:90:24:aa:7b:86:69:d0:
                    e7:16:2d:b5:25:e1:e7:09:f4:95:5f:b2:0a:18:97:
                    c8:d0:7c:58:af:5e:ff:5d:3b:eb:99:66:6a:2f:85:
                    b5:d4:1e:42:1f:e3:9b:7f:70:dc:01:e9:e1:8b:c6:
                    2a:c8:e3:22:5e:af:f8:56:10:d3:25:1d:39:23:8a:
                    1d:6e:62:ee:61:5b:f4:f1:6d:8c:7d:a3:c5:05:cd:
                    df:59:e6:ca:e7:58:32:2d:2f:69:da:33:e3:28:6f:
                    3f:0b:3b:0b:eb:53:b4:3e:fa:b4:37:23:f4:b1:b4:
                    a9:54:21:ae:04:72:d9:c5:3b:5b:e4:e6:bf:e2:94:
                    6d:bf:3c:93:d8:33:e9:0b:69:c1:e1:ab:de:dc:36:
                    4f:cc:31:e6:64:4b:d6:f9:fb:8a:e3:fa:a1:66:d4:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6B:11:62:B8:BC:C5:A9:02:A3:24:C2:AC:64:EF:25:00:BE:92:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.208.0/23
                  107.151.214.0/23
                  107.151.218.0/23
                  107.151.222.0/23
                  198.44.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:b1:2a:1b:5a:67:f1:7b:35:82:c1:0f:39:f1:71:74:30:
         3d:0c:06:b7:43:a8:f6:d8:5a:91:aa:81:4e:03:c9:6b:83:80:
         48:bc:b7:cc:c3:4d:01:cb:38:2b:23:48:c6:b7:a4:1e:f8:b6:
         2f:65:d8:69:8d:a2:09:25:48:4f:b9:d3:eb:c4:e2:a1:8c:9f:
         51:f3:6a:1e:72:b7:74:ae:b6:08:77:f3:a0:50:bb:ee:39:ae:
         f5:96:28:91:5f:01:f0:5f:e7:be:45:cf:cf:f4:39:10:5e:83:
         39:20:ba:3b:a3:ec:86:da:f8:38:b4:a9:46:af:e6:f8:8a:47:
         f6:fe:e8:3b:a3:10:86:75:b2:67:4a:0f:dd:4d:43:ac:d9:18:
         72:1b:68:81:84:dd:72:6d:2b:9d:de:6a:10:58:73:8d:d2:79:
         42:6d:9a:a0:7b:ce:99:6a:a3:97:a8:90:29:5a:bb:06:f0:28:
         2b:f8:e3:d9:c2:b6:6a:32:bc:12:c0:67:ac:96:89:bc:e4:b3:
         73:d6:f5:4a:ed:06:9b:22:c5:0b:50:74:22:84:f8:68:ab:28:
         fe:a7:29:27:1d:6c:09:8c:bc:98:3d:df:80:bc:29:d0:3f:54:
         61:93:38:ff:a5:b5:4b:fe:a5:33:3e:b4:98:4d:9c:8f:c4:14:
         bc:41:66:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org