Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
File:                     546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa (raw, json)
Hash identifier:          Qe28B/PuLDulU6RiRbk2FPvvYMH35EfFqtyK5XuR3t4=
Subject key identifier:   C7:9F:8F:CF:BB:C1:0A:FF:2E:98:BD:9C:FD:A1:DD:FC:D6:86:38:3B
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F43285847C05C0F75EDC3921A378913E0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     394453
IP address blocks:        198.212.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:0f:75:ed:c3:92:1a:37:89:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=fd1283ff-4120-4f12-aa9d-d4a047cd153e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:05:0b:fb:79:9d:d8:08:c3:39:34:50:90:
                    61:bc:1d:88:6b:c7:4b:c6:7c:42:a3:9c:ec:7c:f4:
                    c3:83:4f:8a:36:13:81:2c:dd:c4:ac:03:7c:a1:59:
                    98:ae:3a:3f:ee:12:0c:b5:30:1b:9c:5b:8e:e3:64:
                    0a:fb:9d:b2:7f:00:a6:6b:42:9f:3f:94:75:c3:7b:
                    34:29:e4:19:e0:13:ed:21:8f:26:41:fc:9e:f2:38:
                    91:86:41:ab:27:74:b8:5d:27:49:61:b0:3f:be:4e:
                    6d:38:9b:09:4b:17:0b:fd:e3:43:71:ff:4d:d0:81:
                    d3:3f:f4:a6:d5:f3:1e:d7:04:50:e7:eb:8c:c4:a4:
                    d1:c8:49:91:94:96:4b:f9:48:05:a7:58:a9:33:0c:
                    b2:0f:63:24:5d:9e:ff:89:61:9d:16:d4:05:36:17:
                    e5:e2:44:f8:a9:a9:3b:39:ff:e4:cd:1e:97:a5:6f:
                    c7:be:b9:35:07:68:38:78:06:e4:77:35:27:c7:a9:
                    96:01:95:c4:31:ef:13:ed:3c:f0:ee:af:e9:3a:ff:
                    90:8d:a9:08:f0:86:9e:15:e7:48:e6:31:fe:86:b7:
                    eb:6c:ff:ad:ee:01:c7:ec:fe:55:91:d3:a3:31:fe:
                    25:16:3c:1b:5b:8d:be:e3:89:d0:0b:47:7b:21:af:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:8F:CF:BB:C1:0A:FF:2E:98:BD:9C:FD:A1:DD:FC:D6:86:38:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:77:1a:9a:37:01:8c:fd:44:6b:9a:a4:d3:65:4b:64:66:21:
         b6:f0:e0:f8:5f:4b:51:15:50:7d:41:af:b2:fd:47:cc:b2:c1:
         96:27:88:e5:51:10:09:e0:11:64:a8:7f:9d:e7:ef:4f:e7:05:
         4b:ef:46:d1:84:dc:47:00:54:d6:9c:d3:90:a6:5a:07:36:8c:
         cf:bc:af:2b:f7:21:3f:ab:ed:8b:31:7c:dd:87:18:28:25:8b:
         cb:a7:b4:01:51:0f:86:3c:3c:9e:04:ca:eb:b4:e8:99:29:1b:
         3e:78:64:16:ab:de:71:58:d0:d1:be:ec:3c:8b:fd:b7:9e:e0:
         85:25:88:a7:2e:ae:80:14:5b:97:f3:68:93:a1:fe:e8:e1:d0:
         05:13:97:85:4b:68:60:e3:56:5b:8e:e4:c0:c4:1e:20:89:84:
         61:8b:ff:72:02:10:e5:10:88:ae:91:2e:97:a1:71:03:f2:6c:
         b4:c6:99:c1:da:7f:73:c7:d4:73:e7:2b:7a:80:9e:0f:c6:f8:
         af:03:b4:9f:e8:88:12:93:33:88:29:97:a0:29:2c:d7:40:8a:
         56:75:c7:07:4f:bf:ca:12:b4:62:25:82:1c:33:ea:1e:47:bf:
         22:da:d6:33:70:c6:fb:7b:68:a5:fd:8c:c7:74:8a:da:a1:10:
         1d:12:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:28 2024 by rpki-client on console-fra.rpki-client.org