Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
File:                     ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa (raw, json)
Hash identifier:          UwqquWoeyTUC6s8WRPqvVBF2ihxYZDUO1lgXXCe3RfU=
Subject key identifier:   55:23:03:65:72:C6:62:EA:AA:6D:8B:9A:42:B7:FA:9C:71:32:8D:0B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C449C9F69248C4CC70C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        152.44.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c4:49:c9:f6:92:48:c4:cc:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=56fd4846-b826-47fe-a426-31b8eab440cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:cc:8e:9a:98:71:fd:f8:6d:9d:ea:2a:bc:
                    27:13:ac:11:43:11:52:c3:cc:74:d4:78:a2:96:cb:
                    c1:a2:ac:92:f3:c1:2f:09:e5:d8:ce:d8:93:08:d7:
                    9c:ee:f2:88:2a:96:eb:5b:46:7b:d0:21:b8:c6:10:
                    fa:19:74:bf:69:43:1e:0e:51:72:d6:02:67:a9:32:
                    5d:df:8a:1b:4c:d3:16:34:19:cc:66:37:18:70:df:
                    18:f0:e3:94:6f:06:63:1e:b0:09:5d:c2:9f:13:7d:
                    fe:b6:85:9e:3e:3c:41:f7:87:11:f0:e8:97:88:d5:
                    15:75:eb:73:2b:24:b0:69:38:d4:7b:3f:61:2c:60:
                    e1:cd:d6:dd:8d:4a:a7:8c:ff:c2:66:1f:90:fc:d0:
                    33:35:80:0d:2f:79:c5:cb:85:99:7b:2e:0b:16:79:
                    91:06:22:09:a3:2b:64:34:87:44:93:06:ef:43:92:
                    cb:c5:44:08:a5:03:c9:89:cc:5f:5f:e9:7d:92:3f:
                    bc:42:6a:fd:11:22:a4:7c:16:44:1f:89:53:ff:84:
                    98:c2:18:12:11:e8:ab:0c:86:d8:bd:6e:df:a6:ba:
                    03:49:08:c5:e6:cc:2a:ae:07:32:c4:ed:a9:01:68:
                    07:10:37:d5:b3:12:67:16:12:b3:9f:c2:7d:05:a5:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:23:03:65:72:C6:62:EA:AA:6D:8B:9A:42:B7:FA:9C:71:32:8D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:70:d0:77:8b:ba:a2:01:98:0c:a1:67:d4:fe:04:0f:af:c3:
         da:62:29:f3:4a:9e:fb:62:87:35:90:b1:9a:ae:48:20:2a:fa:
         d8:a9:46:42:9c:92:46:08:fd:a1:dc:b6:74:7f:64:ee:a0:f2:
         e0:b2:36:9e:90:ad:96:ee:a4:e4:ed:8a:13:75:fd:da:64:80:
         ea:19:2d:63:dd:d3:48:df:dd:3b:40:a5:39:38:b0:3a:91:af:
         23:b9:2e:ab:a2:93:ec:32:a9:1c:6a:52:36:a4:a0:d8:0a:c5:
         4e:e2:e9:08:cb:9b:37:a0:a9:2d:16:43:9d:95:5c:da:c9:7c:
         df:1d:96:5f:1a:b7:67:6c:9f:fd:f2:2e:b3:42:6d:9a:2b:ba:
         a1:0c:6a:71:fc:09:93:cf:2f:08:64:3a:98:f4:4d:9c:d8:b2:
         e9:cb:ba:76:70:08:01:46:58:8d:b6:19:23:47:d6:25:99:22:
         59:e9:71:ae:e5:d5:1e:92:ff:e4:64:20:43:60:70:d6:a3:b9:
         38:eb:06:5a:5d:47:d5:94:0f:19:5d:ca:2d:cf:87:dc:36:57:
         9e:ba:6e:47:90:0a:91:ff:eb:53:d1:15:19:05:be:c3:4f:50:
         e2:7d:b3:8d:56:bf:cf:50:bd:ea:4d:56:b4:6c:9f:d5:c9:73:
         4b:3f:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:21 2024 by rpki-client on console-ams.rpki-client.org