Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa
File:                     0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json)
Hash identifier:          P8gwHfpxq9ksDMimbORrwF4DryEvNP6ITVut+ua3eOM=
Subject key identifier:   3E:F8:11:44:BC:83:AE:8F:69:71:3B:29:18:7B:93:45:15:C8:CF:13
Certificate issuer:       /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial:       010D0C9F43285845A6F36E263FF72C63343EF540
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        144.86.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6e:26:3f:f7:2c:63:34:3e:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=cc2aab5a-4105-49a2-a3f5-b1bf16a5104f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:a0:21:b8:42:9a:b9:a2:df:fb:83:ae:42:
                    23:2e:6c:64:e8:56:96:62:9b:31:d9:25:b2:97:d6:
                    8d:5f:4c:b1:6a:5f:59:91:6f:a6:61:4c:8a:f6:bd:
                    80:40:f6:ca:a5:1b:79:4c:f0:26:05:5e:ec:da:96:
                    71:1f:2f:3d:ed:9d:21:56:cd:f5:85:3e:67:4e:c0:
                    4a:32:4a:50:0b:85:6a:33:a0:1b:7c:44:d7:28:81:
                    95:0a:f7:24:18:c3:05:08:ee:75:42:02:fa:5a:8f:
                    d3:b3:da:72:93:0d:f4:90:c0:bd:4e:02:0a:43:d9:
                    75:1f:ed:dd:07:0f:e5:a2:7a:81:84:e3:cd:2b:0e:
                    97:19:6b:f7:b7:ba:8d:65:a2:7b:8c:c1:ed:c0:a1:
                    cc:d2:b2:f7:bf:32:b0:af:d3:db:98:65:b6:e4:10:
                    82:85:f7:1f:ba:00:ae:95:41:e7:9d:67:89:a2:8c:
                    13:e3:17:01:bd:52:b5:6a:98:44:a8:c7:bc:26:8d:
                    3d:b7:c6:97:eb:09:b4:16:c2:24:54:63:60:39:35:
                    9e:51:85:9f:7a:f8:52:d9:99:67:9d:00:42:f2:75:
                    0f:f0:1f:c9:57:6a:e1:68:19:06:51:bb:a4:a4:7b:
                    65:78:d2:c4:7a:53:c4:77:08:ee:24:96:22:32:c8:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:11:44:BC:83:AE:8F:69:71:3B:29:18:7B:93:45:15:C8:CF:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl

            X509v3 Authority Key Identifier:
                keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:69:e5:d3:0e:af:ca:09:40:53:1c:95:de:d3:14:17:fc:
         a9:40:2a:cc:19:d5:f5:84:57:6b:7d:1b:8c:60:be:16:c1:b3:
         9b:71:0b:99:c0:fe:49:76:c9:31:2e:73:71:0a:8e:37:70:3a:
         6e:cc:7f:d7:88:72:f9:6c:57:ac:82:39:ec:84:83:27:cd:8b:
         05:da:aa:c7:cf:3d:28:08:3c:d8:c8:c5:fa:60:75:7b:0b:05:
         f3:67:dd:8b:5b:a3:75:28:a2:4e:b1:2b:94:a6:99:f7:18:94:
         56:1e:2c:31:5f:b9:b2:0d:df:63:24:dd:35:4b:4f:da:67:7d:
         83:ed:52:f9:1d:b1:3f:52:f9:13:7d:bb:5e:a4:2e:1b:3f:c7:
         5f:2b:8b:18:4e:89:82:bc:50:70:ea:87:2e:8b:76:78:d4:52:
         87:6f:c8:24:bf:d9:58:a0:c5:5f:c5:5d:48:e6:aa:f0:ff:0d:
         05:46:03:50:8a:15:6c:73:c8:e9:71:ef:02:17:55:32:d1:f9:
         46:c8:41:bd:8c:5c:e8:60:14:61:7a:29:b0:87:a2:bf:bd:9e:
         87:7f:6b:b5:d6:94:3a:0d:a9:ad:4d:47:25:78:49:e9:2b:33:
         eb:8c:4e:2e:c4:a7:0d:7c:1f:e7:bf:2b:c1:27:ad:d0:a0:06:
         e4:7e:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:57 2024 by rpki-client on console-ams.rpki-client.org