Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
File:                     94a5b142-649d-371a-8c3a-822429553a6a.roa (raw, json)
Hash identifier:          3MZoBWLGWQzK2OH9kmvOS+UWPXXkA2K5gHBjYhZ/Jo8=
Subject key identifier:   38:F2:63:DF:5A:C0:74:AD:11:99:50:5E:B5:B7:55:45:69:A2:78:CB
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584767061D664DBB6E9E54DA3C80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     46832
IP address blocks:        150.199.4.0/24 maxlen: 24
                          150.199.90.0/24 maxlen: 24
                          207.160.152.0/21 maxlen: 24
                          209.106.228.0/22 maxlen: 24
                          209.106.232.0/21 maxlen: 24
                          209.106.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:1d:66:4d:bb:6e:9e:54:da:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=602ed338-0c76-47e3-831e-8fc3749ff270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:74:7a:84:a1:56:86:ac:7f:50:8b:20:6b:
                    12:c3:b9:27:4c:83:18:56:af:28:4c:de:5c:50:47:
                    20:4b:e6:85:89:26:93:ac:3a:67:19:03:87:ad:5b:
                    9b:64:9d:49:4e:36:43:5a:0f:a7:5e:a4:00:38:14:
                    88:05:bd:3a:6b:50:f4:bd:9c:07:3f:58:17:ba:d7:
                    c3:5c:c4:af:6a:9f:b7:79:42:d1:02:55:df:47:b2:
                    db:fc:eb:f5:1c:34:72:76:66:d7:cf:8e:b1:91:f2:
                    de:14:b1:d4:17:b0:c6:80:dc:d4:3f:1d:08:7e:39:
                    35:60:06:aa:43:72:fc:69:68:a9:8f:65:26:82:05:
                    92:69:01:c4:e0:14:3f:c7:14:ec:1b:65:95:6c:2c:
                    3d:85:e2:42:bc:f5:26:a2:3e:90:64:0b:d7:bf:a0:
                    e8:0b:95:e5:8f:e9:e8:b4:95:fd:bc:11:df:32:db:
                    1b:b9:71:0d:f8:a6:3a:88:ce:7b:d9:ac:94:55:43:
                    e7:0e:39:db:e4:6f:a3:fa:e8:39:77:a1:cd:ad:46:
                    96:33:26:3d:0c:53:b4:51:41:9a:2e:08:da:ce:a1:
                    2f:6b:fa:6d:0d:b3:6f:95:52:2a:fd:7c:31:83:df:
                    51:1b:9c:01:8e:3c:bb:b5:6d:cc:62:48:42:76:b8:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:63:DF:5A:C0:74:AD:11:99:50:5E:B5:B7:55:45:69:A2:78:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.4.0/24
                  150.199.90.0/24
                  207.160.152.0/21
                  209.106.228.0-209.106.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:86:c6:81:90:5c:98:81:de:59:3c:74:10:2f:2b:97:63:09:
         22:04:05:c9:85:3a:d9:68:b2:b9:06:61:13:fb:e0:f2:87:ec:
         81:97:3c:18:c7:85:b3:89:06:72:62:62:6b:4e:24:ab:60:eb:
         4c:76:cb:94:a0:4a:d7:a0:46:57:c7:35:18:6c:1a:62:a6:b8:
         cc:77:da:d3:c9:09:e2:3b:aa:58:85:fe:da:f0:93:f4:9a:77:
         85:3a:b5:f4:37:9a:e0:be:76:34:83:3b:80:bd:d1:ce:3d:a4:
         bb:eb:cc:54:fb:07:33:1f:8e:f6:d9:73:36:ea:20:56:f7:8e:
         29:7b:ea:22:2b:52:d4:3a:e3:86:98:d2:97:1b:f3:1a:d3:81:
         d5:9c:26:84:00:92:25:7d:fe:c9:76:26:3b:8d:16:78:07:8a:
         8a:b7:cd:f2:7f:6f:85:4d:ec:35:e5:db:fa:c5:90:0f:c5:cf:
         61:da:51:97:68:cd:17:96:49:30:c5:af:93:80:b7:d5:0f:d2:
         e3:df:45:70:dc:86:40:06:32:a3:23:11:20:b3:eb:3a:e3:2e:
         59:90:5d:24:e7:31:1e:0b:41:4b:df:13:f1:fc:2a:6b:e8:f8:
         90:12:b6:09:c4:8d:ed:4a:87:31:77:d9:95:21:ec:5a:8d:b3:
         9a:ec:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org