Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa
File:                     acf7b392-08ac-38ef-8d86-7828934dfaf8.roa (raw, json)
Hash identifier:          /LGUalkuqUupOpO+SAy0BnxieEDt/CIZ7/t1I0jLf2o=
Subject key identifier:   78:92:AA:9B:0A:5C:46:87:04:37:50:19:F7:88:76:83:A0:3D:D0:BA
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F432858473A5B7DA86FBF6112AAF667C0
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398543
IP address blocks:        168.245.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7d:a8:6f:bf:61:12:aa:f6:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=5979aa0f-150c-4826-81f1-641b58268381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:78:1c:c5:95:ec:b7:c0:36:e9:57:a2:39:
                    8c:e1:2a:d6:20:1a:2e:74:2e:89:49:07:d4:1d:b9:
                    8b:31:80:d5:f2:f5:93:ff:87:e9:e6:5a:6c:15:ab:
                    c6:8b:a9:56:fc:54:00:69:c6:5a:48:06:27:65:72:
                    fc:e5:08:03:4a:72:d4:84:db:50:7c:a0:79:b0:1a:
                    cb:83:49:fd:af:d7:bc:35:ba:8a:06:b6:38:af:f0:
                    cc:d4:d6:8d:92:1e:fb:7e:97:e8:3d:16:ac:6a:92:
                    74:a3:f4:e8:00:e8:d4:0e:71:8d:96:4d:16:d1:d5:
                    9d:ae:14:4d:de:2c:8c:a3:81:91:b3:11:59:79:e9:
                    03:b9:f8:f4:ad:53:d6:c9:0d:82:80:13:96:83:5d:
                    c9:37:96:31:d3:cf:76:9c:ed:98:cc:a6:40:bc:6f:
                    e6:9e:1c:0d:20:71:67:33:a5:a2:ef:3a:07:c0:40:
                    87:7e:cb:aa:a8:1f:c5:9c:dd:40:34:81:d2:a9:4c:
                    9a:71:8f:12:8f:d1:a9:e6:f0:45:b3:07:1c:62:64:
                    75:d6:8d:93:ce:0b:60:ae:5c:de:44:03:f3:4d:0f:
                    28:09:5c:b7:d5:be:04:ec:06:73:e5:c9:7b:c3:ab:
                    16:d1:c3:0a:eb:87:be:3e:9f:c3:b9:68:1d:a8:1e:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:AA:9B:0A:5C:46:87:04:37:50:19:F7:88:76:83:A0:3D:D0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:2e:41:2e:82:2d:2d:0c:5a:6b:16:fd:6b:14:fe:de:f6:
         d3:96:d3:c1:98:f4:ee:fd:ab:37:ce:ec:bd:3d:e3:b2:5d:f9:
         93:38:52:d1:09:3e:3c:97:56:97:58:42:c3:e4:98:50:a4:ff:
         7d:aa:93:d2:6b:cb:1a:db:9a:48:fc:27:18:79:a6:0c:63:5b:
         93:87:85:09:84:d3:85:c2:be:9f:77:5d:de:6a:b5:5d:cf:3b:
         d4:0d:49:da:c8:77:0f:0e:35:21:45:31:d6:fd:65:67:80:9f:
         ad:ed:5d:ea:73:2f:99:b9:f8:f1:74:1f:59:59:bf:3c:db:6e:
         9e:82:69:a7:af:52:8b:06:9f:ec:32:31:e0:23:60:36:02:a4:
         36:2a:d3:2d:94:68:7b:3a:bd:2c:5f:de:eb:7f:67:1e:8d:e9:
         d7:4b:d2:5f:10:df:90:13:db:7c:81:e4:ee:9f:1a:a9:34:d8:
         50:f4:ca:f1:3d:df:98:03:ae:82:cc:d4:b0:64:d5:dd:8f:4c:
         14:d9:38:84:b1:7a:de:02:e0:1c:3d:d5:f2:9f:43:d5:89:78:
         de:33:ea:3e:d4:1d:29:64:3e:3b:db:be:ad:54:68:d3:bb:00:
         16:10:c7:6f:aa:94:b3:50:3c:da:5b:08:d1:7c:ce:19:74:50:
         6c:2d:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org