Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa
File:                     f6e9570a-87de-34b2-96e7-6a88593a969c.roa (raw, json)
Hash identifier:          Cz7usAiM7Yr68P09vsfuFJtTJk97pM0PjyeSdxYU8Iw=
Subject key identifier:   9A:CD:37:A8:82:CB:B8:BF:36:DD:B5:94:81:86:7B:15:30:CF:36:FC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FBF5417625FFF9CE1400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        107.145.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fb:f5:41:76:25:ff:f9:ce:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=18df1dad-83c0-4f8b-abe5-6a1897d2af04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:f4:f4:9d:f9:21:2a:e4:2a:ca:15:75:cf:
                    ba:ee:79:3d:b8:05:f0:0a:f2:c9:20:0c:0a:fb:94:
                    68:d7:9b:2f:71:9a:b6:b4:d6:89:f6:34:6e:c5:85:
                    08:50:fa:eb:c8:37:31:be:af:f3:20:2f:ae:f5:91:
                    36:45:42:e5:3f:15:05:33:33:3d:80:4b:07:2a:b1:
                    26:26:38:7d:d5:03:b0:44:a4:97:80:96:ea:41:34:
                    ef:37:31:dc:2b:bf:ca:ef:93:5b:74:4f:b1:9f:96:
                    b2:66:99:3a:b3:89:80:dc:30:2d:5e:06:3d:7b:39:
                    b1:7f:14:c3:60:0f:2f:2f:df:ef:07:82:aa:e1:4b:
                    10:4f:56:c7:1f:dc:14:a7:ac:28:c1:50:a4:6c:30:
                    c9:25:14:66:a2:2f:dc:a3:f1:c6:90:c1:ef:b3:f6:
                    9a:15:26:b0:a4:36:c4:7b:80:23:c1:e2:27:49:f1:
                    d3:c0:38:59:b8:d9:c1:2f:76:f9:18:6d:db:75:d2:
                    41:a1:3d:ec:b4:85:b9:6f:0f:03:81:4b:f9:58:eb:
                    2e:f9:44:09:7f:89:b5:38:a5:00:8f:9e:5a:b3:f1:
                    95:fe:7e:58:20:a2:a7:31:6f:80:7c:48:05:27:a6:
                    ec:1c:ed:ab:1d:45:02:30:44:8c:ad:60:5c:2d:f7:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CD:37:A8:82:CB:B8:BF:36:DD:B5:94:81:86:7B:15:30:CF:36:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:52:4f:23:17:42:b5:db:18:0b:70:c0:c7:32:e9:b7:6f:c9:
         01:03:f2:6f:75:5e:d9:07:94:5a:94:67:a8:34:b4:74:52:4a:
         f7:95:e6:54:56:df:b7:84:4a:9a:e1:45:06:d3:25:7b:06:61:
         b2:f3:32:a8:09:84:a6:8b:d6:4f:41:11:44:83:1a:f5:9d:2c:
         b1:b0:3e:ac:e6:65:34:7a:25:28:df:aa:08:a0:92:83:d6:91:
         df:8b:1f:57:65:68:db:c8:0c:37:e1:19:65:e7:d0:85:9c:57:
         f5:d8:c7:8b:e6:e9:f7:42:0d:d9:c4:06:21:b7:eb:d3:97:00:
         7d:04:d3:48:b8:85:99:d4:97:ba:2e:cb:08:07:89:73:06:37:
         7f:e6:fa:5e:b7:a7:d4:a0:c6:c6:94:79:7c:79:e5:33:d8:b0:
         02:86:f9:cc:bc:43:65:75:b7:56:15:be:e3:49:df:b6:38:73:
         ec:e6:2d:b9:63:4f:24:75:ba:83:be:63:4c:2c:bc:01:b4:e6:
         3e:a1:84:c1:88:ae:3f:eb:a3:e3:7e:de:bd:f6:a5:97:7d:70:
         8e:57:77:e1:a2:62:c5:94:d3:34:a5:d9:76:20:eb:c9:97:eb:
         50:b5:38:9a:7f:6d:47:3e:8e:f9:b0:08:f2:f0:97:9d:0d:00:
         30:b8:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org