Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa
File:                     ef7e153d-45df-351a-8da1-da52a2a74e64.roa (raw, json)
Hash identifier:          IMSnupUufCDoqdtuJLuL0dragXyJB9oESbJxOOAMe50=
Subject key identifier:   D1:37:5B:E2:80:A8:39:7B:12:C8:80:54:FE:12:49:DB:C8:99:90:F5
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DECF7AD71D936CA887600
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     22863
IP address blocks:        159.18.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ec:f7:ad:71:d9:36:ca:88:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=3987e298-ddb0-4749-bb56-fd18ff54d28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:d4:e7:33:b6:e9:41:45:4d:fe:a8:ec:b5:
                    49:62:72:97:ed:9b:a6:01:b3:44:9f:62:b4:27:33:
                    39:9b:53:39:0f:48:3c:17:23:b2:a4:6d:28:bb:2b:
                    1c:c8:15:ec:77:10:58:ba:cf:95:b7:58:38:d3:04:
                    e5:f2:8c:5d:6f:aa:f1:97:a1:48:b6:ba:4b:58:b3:
                    88:db:c2:b9:55:4d:51:ca:15:4b:69:52:bd:32:b6:
                    5c:0d:1b:5b:eb:76:77:57:67:fb:0d:82:9a:1a:34:
                    d4:d5:b9:19:f3:c3:3e:93:19:81:57:a3:fd:4b:32:
                    15:4b:f0:e9:32:c6:e7:d7:86:b5:fa:67:4f:ab:dc:
                    8d:76:f2:4f:61:f1:db:73:c0:05:e5:0e:3a:a7:59:
                    6a:1f:30:b4:49:64:67:60:e4:bc:79:68:06:91:67:
                    20:04:35:61:d4:fa:77:55:bb:33:ce:75:77:83:d3:
                    72:f0:93:59:15:af:a3:7d:52:a8:39:e8:ad:c9:2f:
                    5a:a2:3f:e7:67:00:24:52:27:34:55:11:fb:84:45:
                    8f:69:43:6f:75:77:ca:3f:3b:ff:da:16:ff:a5:9d:
                    9a:13:f7:c5:72:b1:91:47:02:8c:23:c9:11:8a:a1:
                    a3:3e:27:be:eb:10:7d:65:86:0a:ac:c0:7f:c6:19:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:5B:E2:80:A8:39:7B:12:C8:80:54:FE:12:49:DB:C8:99:90:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:7b:53:5f:8e:10:9f:51:dd:e3:13:3e:f9:bb:fb:9b:c0:
         49:6e:ee:a7:20:73:b9:e2:cc:cf:1e:e6:1c:1b:0b:7a:8f:00:
         a5:62:e2:18:77:b3:ca:48:66:99:57:11:56:98:14:92:92:8b:
         97:ff:2d:3d:b9:9f:55:42:b9:b6:d6:0b:e8:15:ff:47:ef:1b:
         56:bd:20:dc:2c:cf:4e:31:26:a4:c5:23:92:87:42:89:87:c6:
         13:da:bb:44:a9:9e:ec:ff:15:61:2f:34:30:2e:7e:eb:37:4c:
         cf:ca:94:ec:d0:33:d8:35:e1:7e:2a:f1:3c:38:56:b6:c3:66:
         d3:60:8f:0b:ae:5a:95:5a:52:cb:e5:9e:0b:b2:a3:95:5d:28:
         82:4a:f8:ff:16:ce:68:91:70:b1:c1:3b:cd:fd:05:43:b5:d7:
         95:4e:56:e7:66:ff:e9:00:77:e2:8a:af:01:fc:bc:f4:d1:f5:
         22:16:15:fa:3d:1a:07:7b:14:57:f2:7d:e5:80:93:b4:b5:21:
         ba:f9:93:bd:82:b2:82:60:52:46:53:87:cd:ed:d5:b5:0b:c0:
         b6:fc:4f:2e:95:75:70:37:81:56:c0:c8:57:3e:e8:70:50:18:
         cc:1c:aa:0d:7d:d3:57:04:ce:4f:fd:17:e3:06:25:7a:e5:06:
         a4:63:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:11 2024 by rpki-client on console-ams.rpki-client.org