Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa
File:                     a544e3b7-7589-3b66-b791-3313e2d71e87.roa (raw, json)
Hash identifier:          pOL6Pti6A/uCeRvIir8EbDBTwmxw+2z/ZROtm1WylH0=
Subject key identifier:   07:F2:1F:42:E8:86:E6:65:96:D0:AF:8D:DB:6C:1A:5B:7F:33:BA:F8
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584789EBF35E067B82355E719300
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     16904
IP address blocks:        162.221.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f3:5e:06:7b:82:35:5e:71:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ccb56ae7-9599-46b0-b8fa-280fffec4f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:9f:b7:0a:08:03:85:28:52:db:05:a8:e9:
                    99:08:a1:f1:9c:4d:ab:88:d6:cf:23:5a:3b:35:18:
                    77:32:32:58:91:da:83:7d:f7:cf:d9:b6:b3:07:89:
                    ef:04:10:07:b5:36:71:35:40:25:35:38:d7:4c:8f:
                    46:e5:85:76:02:36:c8:c3:48:f7:7e:38:d9:5a:ec:
                    d9:e5:ff:da:1c:51:b4:0f:eb:40:ca:70:9f:80:b3:
                    5e:a8:60:b6:9b:a4:a6:54:0c:8e:b4:18:5a:28:5a:
                    1b:d4:a3:a7:30:aa:a4:c8:4f:52:d9:e6:92:77:df:
                    76:94:cd:a1:a2:ef:66:e8:56:e2:41:ef:0a:61:f5:
                    e1:83:2c:99:7b:00:82:12:ad:ff:e6:12:57:ea:89:
                    98:9d:71:7b:f6:7e:7a:0e:8b:e1:dd:21:a9:32:76:
                    85:d2:05:bd:b7:80:dc:dc:57:d7:89:91:0c:41:d5:
                    4e:b4:15:ed:0e:b2:0e:bb:bf:bf:07:1e:67:7b:e1:
                    37:03:aa:b7:74:ba:e8:4b:ca:f5:2f:4a:b8:c6:69:
                    18:d0:38:5f:18:5f:08:f4:79:db:c6:87:5a:ff:3b:
                    e2:ed:36:af:85:7f:dd:75:6f:fe:e6:73:34:1e:c1:
                    5c:3f:bf:18:d9:75:9c:02:b4:32:b8:41:5f:b3:87:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F2:1F:42:E8:86:E6:65:96:D0:AF:8D:DB:6C:1A:5B:7F:33:BA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:27:7a:3e:d9:53:e9:38:bf:48:df:03:1b:7f:bc:97:ae:
         f0:6e:c0:06:aa:43:71:e2:6c:35:00:ce:2a:a6:11:63:30:55:
         1f:23:95:ae:63:df:93:e3:d0:c3:90:3b:a4:94:2e:4c:c2:2e:
         5b:17:4b:1e:59:9c:76:8e:10:9f:f0:5c:c5:7c:18:60:06:11:
         d0:4a:96:e0:b0:8b:bf:13:e2:6b:ff:4e:0d:26:87:e9:ac:ff:
         4d:ff:a7:6f:d1:f0:6a:11:2d:a6:b3:6f:55:86:88:e4:ef:cc:
         db:e9:9e:9c:4e:5a:8c:61:42:f9:ae:41:aa:8b:e0:3c:52:61:
         fe:22:9a:0d:66:8b:bf:0a:13:78:bc:3c:2e:04:ea:40:12:3d:
         53:b7:22:56:50:8e:1a:3b:74:76:83:65:68:ae:40:04:ed:95:
         d2:07:ed:dd:b4:a3:3b:25:db:de:0a:98:0c:a3:46:5a:11:22:
         86:fa:fc:8d:b3:29:5c:fb:ed:1e:90:80:60:57:86:4f:78:04:
         f5:ac:c3:00:be:7d:fb:23:86:d0:2f:d3:a2:ff:56:ab:9d:ae:
         d4:85:f5:c6:2c:41:28:6b:23:89:b4:18:e5:fd:1f:1e:a9:f2:
         06:4f:40:ae:db:a6:ac:7f:1c:84:97:9e:b4:af:77:93:66:a0:
         10:88:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:59 2024 by rpki-client on console-ams.rpki-client.org