Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3933d427-9faa-37ee-89cb-b0ae86381519.roa
File:                     3933d427-9faa-37ee-89cb-b0ae86381519.roa (raw, json)
Hash identifier:          7RGxI4I2Cg0XS/vTjENsZWMFDX+QaYEC9JJvxAMp+W8=
Subject key identifier:   3A:ED:C0:CF:BE:D8:C1:1F:E6:0E:93:75:E7:8F:75:4B:CB:F4:ED:6C
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858450D85816D31D843B75784B580
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3933d427-9faa-37ee-89cb-b0ae86381519.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        169.150.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:81:6d:31:d8:43:b7:57:84:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=70a10823-7055-4d84-a4b7-9d1355cdd19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:50:2b:e0:40:c1:34:df:15:67:0e:02:32:
                    ba:10:db:29:5b:01:68:72:7e:e2:83:a3:c1:ed:67:
                    bb:32:7a:ca:2d:c3:d9:dd:80:d0:68:95:c4:10:6e:
                    20:3f:62:7a:7b:b4:8c:5a:ea:66:53:59:38:d1:eb:
                    20:2f:52:af:3e:6a:a1:3a:46:e2:cd:73:76:1c:c7:
                    5f:19:d1:83:6c:30:d4:ac:83:af:b6:6c:4f:f9:74:
                    78:5e:3d:15:ec:8e:2c:4b:de:47:73:3f:bf:0f:56:
                    43:43:18:c4:6d:8e:c7:0e:ba:47:4e:b7:bb:6e:20:
                    44:77:54:4b:a9:cf:ce:1e:bd:f2:9e:ae:b9:46:d3:
                    63:ed:b2:6b:7c:2d:5e:c2:fa:ce:89:ae:8f:fb:9a:
                    be:ab:72:84:ec:7a:b0:bf:ff:9f:f6:38:cd:1c:f0:
                    90:f9:01:39:47:e4:64:27:96:1c:94:37:29:21:7a:
                    14:85:7e:fd:3f:d5:9b:93:28:93:4a:e9:cf:35:3d:
                    f5:58:50:c1:94:c6:02:00:72:d0:0c:5a:f3:0d:0f:
                    b1:1b:53:0e:44:27:55:c2:ab:f0:41:c6:bd:d3:33:
                    6d:d2:ce:9f:90:b2:f9:af:4d:8a:aa:b0:38:29:39:
                    15:d4:07:bc:17:b3:b9:f8:58:dc:c0:7b:21:a0:5a:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:C0:CF:BE:D8:C1:1F:E6:0E:93:75:E7:8F:75:4B:CB:F4:ED:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3933d427-9faa-37ee-89cb-b0ae86381519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:6f:62:29:9f:6e:cc:fc:17:88:47:27:c1:86:93:3d:fd:
         d4:41:19:26:d1:54:97:87:53:70:06:51:6c:89:78:48:b7:9d:
         e0:18:9e:78:40:54:69:e4:9b:c3:c9:91:b6:fd:ab:8b:a0:c1:
         dd:6a:b0:c3:6c:22:47:83:bb:1e:15:01:0b:c4:73:07:04:57:
         32:5c:e3:d6:ae:70:50:90:16:26:ba:85:59:ac:19:d1:9c:4c:
         54:0e:af:8e:a7:04:e9:12:f6:af:c6:04:91:c9:b4:86:b1:4e:
         6b:42:dd:12:43:7f:fd:71:4a:a6:db:f4:79:2f:56:ea:8a:3d:
         c4:be:3e:4a:a2:d1:7f:4a:e5:83:57:0f:e9:42:36:5e:b0:bd:
         f2:d4:81:07:8b:6c:40:b1:24:11:48:6d:0d:66:d1:0d:51:37:
         91:d2:e2:63:53:e6:9c:ce:f6:b9:82:ac:73:a0:07:1a:c6:9e:
         ae:7c:2d:22:cf:81:96:58:89:c8:b4:69:c7:17:e5:ca:f5:5a:
         7b:2a:41:1c:b9:48:7c:3f:cb:fc:76:01:8f:7c:63:97:76:3c:
         19:da:ad:c8:0d:93:b6:21:35:48:f9:d5:70:6d:ea:51:63:53:
         2f:d1:71:5a:df:82:fa:5d:7a:84:5b:f4:a0:79:1f:b0:95:3f:
         3c:f9:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:38 2024 by rpki-client on console-fra.rpki-client.org