Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
File:                     a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json)
Hash identifier:          OO2G26ErJK9Dn868BfaIsy080j81gfTtHI1klrgbS8c=
Subject key identifier:   55:71:FD:F2:9A:C4:CC:AD:E7:B1:E5:86:67:EB:21:B6:AD:33:39:86
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847DDCA0DEED30FE1B8E81300C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     137443
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:0d:ee:d3:0f:e1:b8:e8:13:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=547c4c28-da0a-4aba-8674-8c375dfbc24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:0c:50:9a:f3:2b:f4:bd:47:f8:aa:d6:68:
                    a0:7d:fa:69:e6:e0:11:28:94:1b:a5:37:10:e4:bb:
                    fd:0d:42:36:25:b3:31:bb:c3:50:15:4f:8c:f4:ec:
                    3d:33:e5:f2:de:0c:2c:35:72:59:19:8c:7a:85:ea:
                    a9:4a:62:c2:95:93:1a:22:2d:79:67:8e:94:3d:81:
                    bb:2c:cd:d1:89:10:7f:ae:2c:06:f5:6b:3c:0f:60:
                    58:8a:5a:29:00:51:11:f5:29:a2:89:f9:d3:2c:9c:
                    b0:06:c9:27:6a:1b:d3:ec:ff:95:8f:63:64:f6:8f:
                    9a:03:7c:59:1a:cb:b4:2b:a8:30:25:b1:4e:50:d9:
                    9e:de:44:f0:c7:ae:e3:7d:27:1c:91:86:23:7e:91:
                    55:82:ee:cd:74:20:87:42:b1:6d:98:fb:72:bc:f3:
                    2b:ed:c3:fe:ad:f8:d5:05:7e:3c:21:e9:10:bc:9c:
                    8e:a4:96:00:92:8d:11:7d:df:98:8a:26:52:ae:e4:
                    95:4e:7f:c3:cf:04:3a:50:68:99:bd:cb:9a:92:07:
                    84:fe:56:af:89:ae:1f:cf:c6:7a:11:c4:4d:6e:74:
                    6c:18:f1:36:21:27:cf:32:2b:40:d6:65:2f:35:43:
                    69:4a:c3:36:20:49:b5:68:f9:ef:d1:7e:7c:dd:6c:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:FD:F2:9A:C4:CC:AD:E7:B1:E5:86:67:EB:21:B6:AD:33:39:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:92:f6:41:b8:e8:20:03:cb:bb:d4:be:4b:c0:33:29:96:
         b7:13:12:9b:af:c8:d8:94:b6:d2:06:0d:dd:07:91:94:90:85:
         2d:e8:09:da:28:17:04:5b:8e:43:0b:5d:5f:27:14:04:3f:28:
         cf:dd:6b:1f:32:a5:bf:99:78:e3:17:21:3d:d3:c1:66:e9:dd:
         c0:55:af:7a:3e:b3:46:f9:3e:eb:9b:ad:76:5f:8f:27:9a:63:
         a7:5e:4e:37:d2:ca:75:12:69:03:35:2d:9e:38:d4:50:61:34:
         14:5c:81:41:02:ce:2d:b6:00:4a:9f:37:c1:61:0a:e5:b6:e6:
         1a:31:81:79:1b:99:be:64:e1:97:eb:40:38:ad:55:ee:73:fd:
         ea:7c:c7:cb:31:d9:b9:73:14:24:7c:08:b5:82:93:1c:9c:8a:
         87:ea:86:92:19:66:f6:4a:c9:26:5f:8c:aa:07:5c:73:a9:3d:
         23:12:d7:37:13:cd:31:7c:6b:8d:7a:f7:34:0a:80:e2:65:2d:
         61:b7:88:a3:70:fb:f7:bf:49:6b:fc:0b:8e:37:6a:e2:92:f6:
         5e:9d:f2:f7:4e:dc:69:46:b2:36:9d:f7:ce:ec:92:56:ca:45:
         2f:aa:db:69:a9:a0:92:4e:c5:d9:90:21:de:b4:8d:28:08:20:
         da:35:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org