Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa
File:                     c9321b99-c887-3411-afb6-b13a5a25ac1e.roa (raw, json)
Hash identifier:          F/RgFChp2wKYfBB44N4rbOjccBohwiNVA0Ef73OAIDs=
Subject key identifier:   BF:0B:0F:92:FA:DD:F5:C7:4E:2C:D5:36:22:D2:96:FD:AA:9E:D6:C1
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584761718EEDC955E71126BDB400
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     6334
IP address blocks:        151.193.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8e:ed:c9:55:e7:11:26:bd:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=b7e48e65-f37a-4ecf-805b-4b1a9066715b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:ed:6d:84:ab:ea:43:91:3e:80:21:90:a5:
                    fd:ce:61:7a:dd:4c:32:78:07:25:c5:f1:f7:12:c0:
                    7b:4e:37:4d:aa:b8:f8:ea:2a:fd:8c:6d:3a:3e:a7:
                    c7:ac:00:d6:af:81:fa:ab:35:bb:da:cf:1f:01:24:
                    f6:48:5a:43:e9:1b:c5:09:32:3f:63:79:09:25:b5:
                    46:80:d2:30:dc:c9:c2:82:4e:d9:12:20:1d:a8:92:
                    3e:80:2f:6e:05:d4:75:83:34:b5:3a:c4:ef:d7:21:
                    f8:9b:de:8c:5d:fa:27:dc:8c:ef:57:e0:c1:15:e7:
                    6a:ab:00:87:e6:f5:a2:45:6c:0b:19:63:13:05:48:
                    b6:b6:48:8c:25:a4:79:32:2b:01:1f:b1:2c:3c:22:
                    38:2f:b0:5d:27:bc:95:d0:0f:4b:c9:22:17:f2:68:
                    ae:18:0c:5c:89:38:2d:09:e7:68:45:ff:7b:2c:bd:
                    32:f9:64:2f:47:41:fa:fa:ad:c4:58:bf:8b:35:3a:
                    c4:6f:67:68:5d:d7:ad:17:2e:19:80:51:73:bf:31:
                    73:9c:b8:23:0a:a0:d7:b9:5c:32:5c:25:a8:eb:6c:
                    aa:19:09:81:20:af:42:4f:28:4e:4a:99:78:23:2e:
                    0e:eb:7d:33:2b:b6:f7:04:2d:41:ca:a8:ef:2d:5d:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:0F:92:FA:DD:F5:C7:4E:2C:D5:36:22:D2:96:FD:AA:9E:D6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:f7:5a:6c:9f:e0:ea:db:2f:5c:76:70:51:55:63:c4:66:
         d9:b0:ad:6e:79:25:ac:0f:5f:d1:b3:89:a6:70:38:78:3c:bf:
         45:a2:f2:a1:3b:18:a5:a0:c7:a9:76:fc:35:cd:fc:c9:36:aa:
         96:46:ca:68:99:95:42:09:fa:92:c6:42:d4:c9:a7:7b:48:da:
         42:46:1c:5b:89:9e:45:89:06:0c:85:da:89:68:95:18:2c:6b:
         80:6d:5d:64:76:68:8d:f8:2e:47:70:36:b1:04:af:46:f4:29:
         c7:e0:86:dc:c7:2c:ed:ff:40:55:a7:13:36:a7:cb:cf:4e:78:
         57:4d:be:99:c6:bf:77:83:c9:a2:0c:d9:26:bb:ba:4b:80:91:
         8e:8a:42:ef:b0:4d:7c:a0:fd:47:16:4a:88:2a:43:3d:fc:09:
         93:df:2d:22:5c:46:10:37:3e:b0:08:df:23:f6:7f:37:17:49:
         92:4d:70:4f:bd:49:98:3d:02:8c:1e:77:80:f7:5b:b5:38:e3:
         ff:4c:04:19:a2:13:ad:a2:e9:ce:54:76:ce:e7:e8:af:6b:f7:
         e2:29:e0:4f:ef:65:c7:37:bc:3d:88:e3:73:19:d8:26:52:a7:
         35:d6:c7:84:a7:a1:81:c3:96:5d:17:eb:da:ff:2b:e4:42:dc:
         d3:6f:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:17:43 2024 by rpki-client on console-fra.rpki-client.org