Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa
File:                     66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa (raw, json)
Hash identifier:          BjmOaBddYj1WlHinDKMdtfydmP1KQ8dVdPuYpUC4YQ0=
Subject key identifier:   06:D2:EE:85:CA:0F:97:25:1A:7C:6D:20:B0:81:0B:47:CD:FB:80:F0
Certificate issuer:       /CN=190a907f-bde1-4ae9-a43b-80d0b516600a
Certificate serial:       010D0C9F43285847D6B09F3521805B04C8E6E480
Authority key identifier: 08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa
Signing time:             Mon 11 Nov 2024 00:58:48 +0000
ROA not before:           Mon 11 Nov 2024 00:58:48 +0000
ROA not after:            Sun 09 Feb 2025 00:58:48 +0000
asID:                     398846
IP address blocks:        156.142.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:b0:9f:35:21:80:5b:04:c8:e6:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190a907f-bde1-4ae9-a43b-80d0b516600a
        Validity
            Not Before: Nov 11 00:58:48 2024 GMT
            Not After : Feb  9 00:58:48 2025 GMT
        Subject: CN=5b2a75bc-e245-4096-bea4-5f8b47986e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:a1:96:88:c1:da:a8:39:a0:ef:16:88:32:
                    b3:8a:75:fb:a0:1c:bf:ab:2f:84:9e:28:56:6c:e8:
                    36:f8:54:64:f9:50:41:78:4f:eb:4a:c6:17:d8:7d:
                    6f:b6:9f:65:99:12:fc:62:48:85:7d:d7:b9:17:37:
                    6c:7c:ab:14:3f:b5:0b:47:85:2d:27:cc:a6:36:bf:
                    e3:1a:86:6b:34:89:21:76:74:41:db:3f:0f:21:1f:
                    9c:f5:aa:21:dd:f9:51:21:4b:ea:b6:b9:c1:69:10:
                    96:2d:be:63:76:a5:d7:f6:e2:a3:30:90:88:27:38:
                    e4:61:df:f4:5a:a1:b5:c7:fd:81:af:67:60:3a:7f:
                    bb:10:cd:ab:40:25:fa:28:5e:bb:e5:39:c4:51:18:
                    64:59:e1:e5:29:19:1b:8c:54:76:92:5e:1b:8a:e1:
                    18:e5:94:af:c6:6e:5d:09:7c:45:f5:53:92:af:44:
                    c0:17:2f:da:5c:5b:77:e5:ba:7a:68:c9:53:ac:59:
                    8e:2a:e7:f3:bc:d4:c2:71:53:59:10:1b:c5:c1:c1:
                    b9:66:a5:8b:6e:91:37:c4:27:15:9a:eb:f0:c0:f6:
                    1f:9a:98:42:ff:cc:5f:63:96:01:e6:63:7d:43:90:
                    7f:b9:c6:82:79:d5:40:60:f7:68:e3:cc:56:15:c3:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:EE:85:CA:0F:97:25:1A:7C:6D:20:B0:81:0B:47:CD:FB:80:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl

            X509v3 Authority Key Identifier:
                keyid:08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:25:24:29:7c:1c:69:d4:e3:f2:67:e2:87:62:db:68:fa:
         e3:5b:e7:c7:84:1f:d3:e1:7b:05:c6:62:27:74:27:ce:95:29:
         25:d8:4d:47:59:d2:f5:2a:d2:c6:86:51:6c:4d:af:8d:c5:47:
         c7:1f:1b:52:b3:f1:5a:61:11:96:f6:ea:80:07:10:fb:c5:a1:
         92:0a:2f:f5:34:05:dd:28:d8:5a:6e:c8:2e:60:c5:6e:ed:20:
         f0:69:1a:34:d6:20:fc:a7:6a:29:cc:5f:57:bd:58:63:90:19:
         28:42:40:17:82:36:71:86:ff:e6:c3:91:c3:1c:8c:d3:7c:da:
         93:b4:69:0d:c7:69:ca:28:25:0f:9c:8b:3e:8a:29:35:7c:31:
         63:ab:f7:e6:48:fb:29:bf:35:dc:26:5a:00:82:07:49:c7:07:
         c1:3c:af:33:da:3b:0b:37:3e:19:9c:1e:bf:f6:14:84:59:45:
         d0:f8:d5:ad:f7:2d:59:b0:35:2b:83:d0:aa:28:4c:1f:93:41:
         7c:d9:3c:55:6e:c7:af:f6:82:b7:21:1a:fc:24:ca:25:56:94:
         29:a4:10:db:74:2d:b8:e4:1c:29:55:01:92:12:01:de:c8:55:
         ec:2b:d8:dc:86:8d:a5:15:be:e3:ee:22:d9:46:cc:ca:38:40:
         93:f4:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:27 2024 by rpki-client on console-fra.rpki-client.org