Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6f6437ed-f1bf-3acd-abad-cf0999994a6b.roa
File:                     6f6437ed-f1bf-3acd-abad-cf0999994a6b.roa (raw, json)
Hash identifier:          +cyVkf2hj6YpqQaBjm1/wznYyRdKxhve8ODPKguZKDw=
Subject key identifier:   C8:23:E6:79:0C:01:FC:F4:6E:08:1F:C2:65:C4:F0:47:F7:DD:1E:EF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858450D858184785E8A1F81AA71C0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6f6437ed-f1bf-3acd-abad-cf0999994a6b.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        164.152.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:81:84:78:5e:8a:1f:81:aa:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=ab647f40-707b-4c4d-9d37-01187711e8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:b7:36:4a:68:8f:b5:29:7a:4b:d8:2d:50:
                    0f:2d:d1:47:aa:28:b9:5d:4e:66:7c:6c:51:11:e2:
                    7b:d2:ae:47:c4:e7:78:78:c4:0a:c4:24:cf:8f:01:
                    db:5b:02:32:7d:a5:d5:03:d6:24:db:67:35:85:11:
                    be:cc:5d:b5:94:42:6b:ab:c6:a6:19:ca:a4:1d:0f:
                    bd:db:2c:7a:a1:e7:4e:fe:ef:7b:c0:c1:eb:86:e6:
                    18:06:1b:85:76:84:c8:ed:55:21:45:be:ed:1a:e0:
                    73:43:23:b6:e7:73:40:53:c9:0a:cc:04:22:78:67:
                    53:27:17:11:4e:7d:6e:fe:d5:fc:e6:a4:a5:73:a5:
                    f4:fd:2f:fe:c7:a0:06:4e:84:e5:8e:3e:6f:39:c1:
                    d9:db:2c:27:ac:53:67:66:6d:ea:93:07:b7:30:b8:
                    55:a3:df:6b:cf:56:f7:a7:4d:69:cb:61:80:39:ed:
                    26:52:c9:33:44:a6:e2:e1:44:57:5e:46:e2:86:1f:
                    59:e8:31:6a:cf:75:12:c6:7c:70:eb:7b:e6:42:d4:
                    07:59:66:f4:43:b0:9e:d8:20:b6:86:3b:03:ae:a2:
                    41:91:6d:c9:09:4f:a0:06:12:5e:e0:f9:f0:78:04:
                    46:75:c9:f5:23:90:c1:07:a6:a4:96:a2:9c:51:11:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:E6:79:0C:01:FC:F4:6E:08:1F:C2:65:C4:F0:47:F7:DD:1E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6f6437ed-f1bf-3acd-abad-cf0999994a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9c:b6:29:d5:6d:52:9a:ff:ba:da:f2:bb:ea:f4:aa:68:6b:
         e8:16:6e:90:41:58:9c:2b:7d:ec:22:69:07:05:58:36:29:12:
         05:29:32:15:b1:83:7c:ab:31:63:db:cb:24:43:5e:ac:03:ce:
         d3:d3:fa:04:54:30:b9:ff:60:b5:3e:7c:08:94:6d:dc:00:cc:
         3e:21:91:f8:bf:93:3d:cd:92:09:e9:c2:ad:8c:27:5d:f4:45:
         e4:05:c4:6d:de:9c:53:3a:11:99:05:16:57:94:6d:8f:ba:3f:
         f5:fd:4d:c5:58:52:4a:5c:a0:ff:da:33:6c:e4:cc:73:9c:8e:
         ff:cf:00:d6:5d:95:84:5e:a8:16:ba:4f:86:a4:99:33:9d:93:
         56:a1:94:0c:a4:1b:1f:4c:c2:a9:92:21:5e:cb:5e:d5:43:ab:
         dd:69:d3:2c:bc:ea:9b:ac:c8:ce:1b:34:7d:77:b1:54:69:55:
         6f:aa:97:8a:55:8d:79:5b:b4:82:99:95:4f:a8:01:d1:c0:de:
         1b:b7:d7:6e:6d:a1:d9:50:61:f9:7f:19:e6:4f:b1:4a:1c:68:
         2b:ef:67:2e:e4:5f:03:10:2e:86:99:6c:3a:ad:8e:1a:d0:98:
         b4:d5:eb:a2:9e:c1:5d:93:5f:8e:d5:35:e6:71:6a:4f:f3:06:
         c9:9e:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:04:55 2024 by rpki-client on console-ams.rpki-client.org