Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d702515e-fd06-38a5-8223-1d2d83f83720.roa
File:                     d702515e-fd06-38a5-8223-1d2d83f83720.roa (raw, json)
Hash identifier:          T8Rlb5FoZ4lAJ235Erv0J4SiAF/QLBSPS+s56FTqfUE=
Subject key identifier:   B0:38:33:9E:79:34:63:BC:81:10:D5:EA:DD:51:02:D5:EA:03:D7:2B
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285845316AEB1585AB77EDC0058180
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d702515e-fd06-38a5-8223-1d2d83f83720.roa
Signing time:             Wed 13 Mar 2024 10:36:07 +0000
ROA not before:           Wed 13 Mar 2024 10:36:07 +0000
ROA not after:            Tue 11 Jun 2024 10:36:07 +0000
asID:                     151804
IP address blocks:        107.151.234.0/24 maxlen: 24
                          69.165.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:6a:eb:15:85:ab:77:ed:c0:05:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 13 10:36:07 2024 GMT
            Not After : Jun 11 10:36:07 2024 GMT
        Subject: CN=08ca6fe5-64a2-4746-b1bc-946e535272ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:f3:f8:ee:70:96:7d:a8:b4:d0:78:75:2a:
                    16:2b:05:55:be:cd:57:d0:e1:dc:f5:2c:cd:ec:e4:
                    ec:59:92:5b:2a:ae:7a:c7:97:2d:93:8c:05:40:d8:
                    98:57:84:dc:61:fe:68:da:d7:2e:ba:c5:57:7b:65:
                    b7:a5:4a:89:89:95:a1:e4:9e:0c:c1:eb:35:f0:b5:
                    ce:80:0f:d6:12:bf:01:f5:01:a0:a7:7c:59:e0:60:
                    4c:2f:fd:d4:b8:85:56:16:af:d7:82:4c:80:39:d1:
                    6a:b5:d5:f2:2b:df:50:33:0e:ee:a6:79:12:60:56:
                    53:3e:49:51:bb:60:d4:b1:62:7e:de:db:95:a3:70:
                    f1:ef:1b:ba:5a:e0:86:f4:15:2a:ef:af:91:f5:e4:
                    58:c9:7d:e1:9b:48:4d:42:66:18:f8:9f:02:77:74:
                    b7:df:08:48:6f:e2:4f:9c:c2:3b:46:70:0f:40:0a:
                    0b:e5:2e:71:63:b5:67:e8:51:1e:3a:6d:00:4f:7d:
                    09:43:a8:78:b3:c3:ac:fd:5b:19:67:fb:a1:e8:ef:
                    4c:2b:be:9d:19:fa:52:1d:59:87:25:32:86:fd:84:
                    26:3f:47:18:48:1c:cc:7a:8b:ad:c1:19:fe:82:78:
                    97:ef:e1:0e:04:7c:18:60:a8:bf:6d:72:6f:49:ff:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:33:9E:79:34:63:BC:81:10:D5:EA:DD:51:02:D5:EA:03:D7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d702515e-fd06-38a5-8223-1d2d83f83720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/24
                  107.151.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:b0:45:f8:39:56:ee:e4:2c:03:8c:3e:1e:55:95:61:ef:
         dd:35:49:b0:79:1e:a7:3b:be:b5:81:a1:e5:ab:43:36:7b:db:
         ab:ef:42:e3:92:8b:1e:90:49:94:ab:83:29:14:2f:44:77:ed:
         c4:e0:60:66:7d:9a:c9:5f:81:a8:c1:78:54:37:56:db:8a:c0:
         09:4d:ac:5a:7c:21:b6:14:0e:c9:3c:c5:03:bb:81:e5:68:42:
         9b:3e:97:9f:de:2e:8c:b8:5a:57:c9:5f:44:d2:af:ae:8f:7c:
         a8:cf:c9:e1:6a:77:6d:92:28:f6:91:85:02:23:ef:bf:fa:c5:
         31:79:1b:5e:14:b9:78:f9:f2:36:a1:61:25:a7:10:ce:3f:13:
         1d:2d:b0:2c:5e:13:59:5a:fb:67:ef:bf:3a:f5:8c:b7:89:ae:
         ec:09:47:40:3f:97:86:de:b3:71:a3:ee:f6:88:bc:34:cc:2f:
         ae:74:f3:1e:0c:e6:0a:37:24:a0:3e:e0:14:32:59:a4:44:f2:
         bc:8d:11:79:fe:6e:d9:f8:df:c1:f8:2d:f2:d8:1a:ec:68:fa:
         39:4f:ba:37:1c:bc:4a:03:44:e2:18:12:e3:54:45:7b:fd:09:
         61:5a:44:b6:f0:1d:d3:0f:85:72:0d:49:6e:b1:e0:2f:27:99:
         af:27:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:50:33 2024 by rpki-client on console-ams.rpki-client.org