Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa
File:                     e9ddd58f-d402-3228-8842-fe9c4e665a35.roa (raw, json)
Hash identifier:          /b4SSEI6nsQ+GfjsGDrCY7Hh5Z3XdMOkmp7sCAqEhOg=
Subject key identifier:   47:14:7A:D0:25:65:FA:1D:FF:8D:2A:20:9C:F2:E6:CF:14:F1:BC:FA
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F43285847DDDD74FB93664BE72D125550
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa
Signing time:             Wed 13 Nov 2024 14:39:48 +0000
ROA not before:           Wed 13 Nov 2024 14:39:48 +0000
ROA not after:            Tue 11 Feb 2025 14:39:48 +0000
asID:                     14555
IP address blocks:        170.10.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:dd:74:fb:93:66:4b:e7:2d:12:55:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Nov 13 14:39:48 2024 GMT
            Not After : Feb 11 14:39:48 2025 GMT
        Subject: CN=adb81d0f-081b-4257-b96f-81ba02422934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:fe:11:fb:4a:51:38:c0:1c:2e:87:7f:5e:
                    24:73:5e:7c:cb:56:be:77:f9:bb:ca:de:8f:a8:51:
                    03:23:3a:23:f4:72:8c:ee:36:cd:7b:62:11:4a:2f:
                    94:d3:45:24:db:1a:fc:eb:20:8b:70:9c:a6:3b:42:
                    c0:46:49:55:e8:e7:23:00:ea:9d:75:77:71:c9:f0:
                    28:65:1e:6f:96:7f:5c:12:32:df:ab:b8:69:44:c1:
                    73:55:c1:98:f0:8f:12:62:ff:ce:1e:85:24:0d:7d:
                    63:3d:c5:63:6a:c6:16:8f:3f:9f:81:6d:43:90:1a:
                    d6:05:1d:23:a4:a7:12:e8:1d:dd:3f:df:6a:54:80:
                    64:01:2d:28:ad:c3:40:4a:56:a1:dd:88:f4:80:02:
                    89:59:c3:89:54:a1:c9:e8:a6:b2:10:c5:39:10:89:
                    2f:9a:de:83:12:b1:bd:96:99:48:65:c7:4e:ae:53:
                    1d:59:68:cd:8d:f1:b6:d4:4a:cd:12:3c:59:41:17:
                    07:69:15:f7:cc:99:7a:32:14:10:80:8f:b9:d9:a3:
                    d5:48:0f:ff:20:f1:ba:1b:43:87:4d:53:4f:bd:46:
                    3c:21:ef:2e:37:6a:87:6c:4f:34:09:77:84:29:41:
                    4d:59:04:d0:cb:eb:ab:c6:37:d8:77:d7:84:b6:cd:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:7A:D0:25:65:FA:1D:FF:8D:2A:20:9C:F2:E6:CF:14:F1:BC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:fa:33:6f:f3:e5:5b:95:70:6c:a3:d9:99:60:1f:c5:d3:1e:
         a6:14:52:13:87:53:e8:de:ab:4e:5b:0f:a6:b7:d0:72:97:8b:
         1e:85:d5:5a:88:30:10:30:6c:49:95:3e:f8:5e:fe:cb:2b:d7:
         ae:68:01:f3:26:94:a4:78:ca:eb:b5:35:4d:91:d3:de:9f:bb:
         81:cb:6a:ae:8a:2a:73:03:56:1b:b3:e0:da:20:bb:3e:90:63:
         f0:c8:3b:5a:b0:40:c3:3c:38:12:60:92:dd:e4:71:81:a4:06:
         7f:5b:3b:98:98:bf:0e:3e:89:89:d2:06:69:0e:5f:24:b8:f8:
         ec:b9:eb:a1:03:41:98:d5:7b:40:19:9e:c5:60:60:43:49:b6:
         2c:bc:1f:5b:37:ff:88:54:7b:e9:e1:1e:8f:31:45:76:45:be:
         c4:45:30:09:2f:e4:88:10:3c:69:06:d1:2b:58:38:e6:1a:25:
         35:43:fa:43:4f:cf:f7:03:1d:27:d5:90:8b:55:85:d2:fb:aa:
         83:1a:90:ed:f5:72:10:7a:6c:92:fe:a2:0b:72:1a:b9:d4:5c:
         22:a9:f8:fd:08:68:e5:33:cc:1d:c6:48:59:d7:a3:7c:f3:1a:
         a1:d0:83:43:f5:63:61:bb:c3:1f:37:d1:67:18:8e:d1:12:06:
         a3:80:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:14 2024 by rpki-client on console-ams.rpki-client.org