Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa
File:                     ded8fdfe-386b-3030-974d-da10c23ff1f8.roa (raw, json)
Hash identifier:          HtucqPsB8t1Di86stbkzKzzsDAyUHAXiEUKq98X/P0o=
Subject key identifier:   4B:FB:05:24:5A:21:24:74:F2:3B:0B:58:08:D9:CB:09:7B:45:A4:98
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847362B5ED477CFD53A2A892480
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     55933
IP address blocks:        107.151.240.0/23 maxlen: 24
                          198.44.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5e:d4:77:cf:d5:3a:2a:89:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=aadac166-2c4e-451f-8fa5-6bdbf36788bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:69:85:5c:71:ae:5c:28:be:20:6f:e3:10:
                    be:ed:18:fb:4a:b6:3f:90:bd:f1:06:74:56:94:fb:
                    3b:08:38:f5:4f:4c:20:70:73:e3:2d:eb:78:d8:9d:
                    b0:5a:b5:bf:99:42:cf:bd:20:3b:ba:13:87:b2:21:
                    62:83:39:e6:e9:97:19:b9:3e:49:ab:70:72:10:64:
                    07:a0:e8:fb:55:59:06:ca:62:f1:cf:29:e0:02:63:
                    88:ce:ae:e6:c1:f8:aa:55:e6:30:31:cf:eb:84:a6:
                    aa:82:24:b0:28:de:64:28:d7:4f:50:65:e7:b6:f5:
                    54:27:68:ee:8c:22:f5:7f:fd:2f:d4:56:1d:9e:83:
                    b4:e1:4a:83:ea:95:5b:ae:c3:4b:5f:34:17:e9:d5:
                    a3:26:50:60:0a:9b:7a:40:c4:64:21:ab:bf:52:6a:
                    a6:aa:2e:0f:17:6e:19:27:4e:f3:fc:3b:89:1e:4b:
                    5f:34:7f:ae:39:dd:07:92:27:b5:8b:27:c5:9c:bd:
                    45:b9:56:9f:70:a2:f7:f2:a2:25:4d:67:f8:c5:51:
                    bc:8e:3f:01:d8:a1:2b:ae:d5:ef:11:13:fa:e8:98:
                    6e:fd:bf:42:f1:02:6d:16:52:c9:f6:11:f0:13:9e:
                    5e:a5:2f:58:be:c5:6f:71:7e:4a:de:02:1f:6c:b9:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FB:05:24:5A:21:24:74:F2:3B:0B:58:08:D9:CB:09:7B:45:A4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.240.0/23
                  198.44.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:71:57:95:04:ac:74:00:92:ad:73:74:4b:ed:ad:0b:d1:
         4d:44:67:16:c5:72:bb:bd:d3:a2:30:b2:5a:57:f4:bd:8c:44:
         f5:11:9e:9d:ef:7d:dc:ea:96:93:a0:f3:15:78:5f:c3:ed:10:
         26:8c:9f:95:61:ce:5a:e6:01:12:8b:fe:12:cc:cf:26:a4:99:
         eb:1b:93:9f:1e:96:b4:52:04:66:4b:3b:c2:2f:89:93:cb:22:
         4f:6b:00:94:d6:a9:9e:d4:4d:21:83:97:02:4e:44:59:4d:a6:
         60:24:d9:e2:ea:26:75:4a:29:7e:6a:78:89:99:3a:dc:81:83:
         84:35:f4:4f:50:5d:8f:09:7b:df:de:b6:45:68:7b:03:79:dd:
         ad:ad:3c:38:50:ee:11:01:08:4f:fa:bf:72:f8:e5:47:e3:78:
         13:01:93:6b:ad:3b:03:53:05:ee:f4:8a:3e:f3:22:f1:96:3f:
         48:ca:90:67:82:e6:53:b8:97:a5:bc:4d:80:18:4c:8e:47:a7:
         c5:80:8c:05:35:70:43:c0:af:2a:3c:71:f8:b8:b3:20:65:86:
         3e:b7:ed:27:93:fc:c1:55:b3:f7:62:84:f3:7d:e8:8b:d6:21:
         e7:5c:d5:a2:06:38:e1:51:d2:48:2f:d2:e1:9a:83:15:1e:38:
         dd:e9:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org