Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa
File:                     a9b4a6d1-0169-334b-96f1-c55bc379552b.roa (raw, json)
Hash identifier:          lqPqDD9sxWRZdk1VfL7RVuIFQ7wUi7hqXqm8bePHWIM=
Subject key identifier:   0B:C8:AA:E6:27:01:67:22:41:6C:32:D8:C7:E6:7A:AD:C7:63:9B:25
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847ED24BBE82A8A35553CCC5440
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     18013
IP address blocks:        107.151.200.0/21 maxlen: 21
                          107.151.200.0/23 maxlen: 23
                          107.151.202.0/23 maxlen: 23
                          107.151.204.0/23 maxlen: 23
                          107.151.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bb:e8:2a:8a:35:55:3c:cc:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=6efe7868-2552-45ef-9a08-89e2652abc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:77:27:1c:ab:23:eb:3a:0e:b8:cb:37:6a:
                    bc:20:c6:98:fe:c4:cd:85:6b:77:ae:3e:ab:d0:f9:
                    28:93:a0:eb:48:b5:44:ca:6d:12:bc:6c:a8:94:10:
                    54:e3:8d:9c:48:61:7d:db:dc:72:f5:3b:28:fa:be:
                    f2:a0:c8:d6:d7:39:62:07:05:39:aa:64:94:e3:ff:
                    f1:f3:57:ca:cc:54:db:1a:51:43:b3:e0:7c:aa:ce:
                    50:ca:3f:fb:21:73:98:95:d5:b3:cd:7f:8a:26:f3:
                    99:39:77:0d:76:1d:84:10:37:b2:32:19:0f:e8:19:
                    39:45:a4:c4:74:85:62:0f:db:62:19:45:3d:5e:4b:
                    22:38:67:74:76:f9:15:76:01:9e:64:dc:ee:e6:6c:
                    32:af:14:a5:4f:64:b6:c1:7a:5c:2d:06:05:65:63:
                    e8:cf:98:c1:8d:96:fb:41:b2:b8:ea:9d:4b:b5:cf:
                    49:c9:ad:7b:d5:bf:8b:66:d4:4d:5a:e2:23:f2:c1:
                    f9:72:8d:02:59:42:5c:02:fd:38:18:d3:a0:a8:96:
                    62:49:f0:33:3f:a1:b6:cc:21:ba:2e:15:47:6e:fe:
                    c9:af:bc:78:f4:0c:11:6b:90:29:04:2e:74:74:1b:
                    2c:88:90:2d:cb:8c:bd:52:4c:e1:75:77:8d:00:91:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:AA:E6:27:01:67:22:41:6C:32:D8:C7:E6:7A:AD:C7:63:9B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:4a:8a:28:59:06:47:f7:33:2d:31:47:ec:5e:e9:d1:87:
         47:31:a6:82:6f:22:81:8d:1a:38:54:36:9b:d5:3e:4b:d4:8c:
         a0:f6:0d:a4:a0:08:9e:73:85:84:9f:ad:39:d1:4b:e0:49:4a:
         ba:bc:b6:49:cd:3f:03:a0:98:91:6c:42:32:bf:52:af:f2:02:
         1c:a3:2a:03:c1:87:74:c2:93:60:7e:81:04:02:e5:a5:a5:41:
         f0:b4:7c:39:c8:6a:2d:d2:2e:e8:81:81:4c:f9:15:b5:a9:5f:
         31:47:6f:e9:9f:05:d9:59:b3:4d:9f:81:b2:19:62:38:fb:60:
         1a:32:de:d5:25:78:e1:32:86:ae:b2:60:ab:2d:53:4e:7b:87:
         f8:7c:9c:6e:36:0f:a0:7f:ea:09:cc:a1:e8:dd:8a:f0:51:f4:
         b5:c8:ef:2d:4b:f3:4c:8a:39:fa:2a:5b:b5:7c:c6:77:a4:11:
         c8:91:16:1c:d0:22:6d:ee:fe:8c:6e:06:88:ab:87:12:11:21:
         10:01:62:c0:9b:69:7e:24:02:b0:d5:d2:44:d5:49:2b:56:a7:
         b0:a7:2f:f1:06:24:ed:e7:c8:5f:5b:ee:dc:72:74:d9:9c:68:
         a4:dd:e6:34:1a:04:80:9b:85:e3:6a:94:bb:61:63:f8:f8:c5:
         6e:8c:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org