Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa
File:                     8ebacebc-ec41-35ad-ab0a-b4691864278d.roa (raw, json)
Hash identifier:          izmfFqkIevcNuFr7ZgAushq96DJJ9gAlDIZecUnQP+I=
Subject key identifier:   21:32:F6:FB:A8:7F:20:3C:95:D3:A7:B3:AE:5B:9D:E6:AA:12:7D:C9
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F432858477D5B9FB58D64E75860276C80
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        151.193.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:9f:b5:8d:64:e7:58:60:27:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=bbfd9296-7bb9-4f97-8016-f9c5d183c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:87:27:2c:6d:b3:7e:ab:8d:57:99:8e:0c:
                    a6:22:34:92:75:e4:83:bd:69:96:93:f6:0f:21:de:
                    98:c5:e8:48:4c:5a:b5:01:b7:4d:b7:df:77:02:d8:
                    1d:68:b1:21:84:7b:53:e0:8d:e5:27:05:31:61:73:
                    90:8d:26:44:7d:3b:bc:c5:8b:ad:7d:47:3f:da:98:
                    a5:de:22:f0:e1:ea:e1:b7:00:85:7c:7f:1c:24:73:
                    e9:02:84:c4:fb:af:3e:d1:bd:b2:7f:97:52:04:49:
                    44:14:95:a3:60:e0:5a:38:31:fb:69:90:9f:ca:55:
                    3a:d8:05:78:7f:f7:dd:af:a8:f9:c9:55:8e:bf:68:
                    2c:ac:d5:c3:dc:b6:c4:91:cb:1a:48:ad:ed:4e:7d:
                    96:27:9a:a8:5e:fb:4c:f0:62:c9:f3:31:d6:e9:7d:
                    bb:dd:33:16:39:d1:c0:34:fe:79:a2:ec:a5:cf:bb:
                    ff:68:b3:c5:0d:d3:e1:ef:f5:92:62:35:54:86:6e:
                    73:fe:3b:e6:9b:08:89:26:5d:93:67:71:9c:7b:5a:
                    25:0e:85:79:28:cf:46:f0:eb:3f:c7:9a:0f:0d:cb:
                    f7:aa:c0:ff:eb:2e:57:39:a3:05:33:0d:d0:40:49:
                    c8:aa:5f:49:52:cb:5b:88:1d:cd:82:19:70:25:5b:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:32:F6:FB:A8:7F:20:3C:95:D3:A7:B3:AE:5B:9D:E6:AA:12:7D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:44:98:b7:f2:b1:40:47:e4:39:e4:aa:2e:e3:c9:33:47:d0:
         72:43:c1:bb:be:1c:86:13:80:17:04:b3:6c:e3:04:33:0f:63:
         5f:dd:6d:f3:03:c6:07:c8:d3:fc:7e:ef:62:b1:f4:53:79:1c:
         f0:b9:f3:77:72:ec:65:d8:fe:fb:be:aa:52:6b:7b:35:be:3c:
         01:cf:c3:2f:f8:ea:03:a1:44:62:c0:2f:75:dd:4e:5a:78:5e:
         44:ae:26:a0:74:60:2a:0e:02:0e:20:0e:01:d3:0a:05:1b:62:
         5b:cc:1d:91:a2:af:8d:50:02:ac:29:24:2f:b2:2a:a4:1d:dc:
         65:1b:3b:6b:6d:aa:e7:a4:8e:01:8d:c3:f8:8c:41:30:aa:67:
         05:8e:9a:75:cc:e5:48:a6:0a:9c:29:04:13:17:38:c9:b4:77:
         23:4d:1c:f0:5e:5f:49:49:47:f0:20:b5:df:02:9b:65:0a:ec:
         3e:ae:12:6f:df:4c:23:f0:79:6b:5e:0f:cf:bb:9e:de:ea:d6:
         e0:00:23:c7:6d:46:17:85:30:c8:f9:e8:96:c8:55:50:a0:7b:
         df:2c:33:2c:8c:48:03:23:82:78:78:ce:86:f8:af:03:bf:14:
         cc:85:e1:0d:a0:c0:ae:73:5b:9a:bd:fc:ff:a9:92:c0:49:f9:
         6f:70:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:26 2024 by rpki-client on console-ams.rpki-client.org