Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/d63bb1e4-cdb9-314e-87e1-f0a42dbd792b.roa
File:                     d63bb1e4-cdb9-314e-87e1-f0a42dbd792b.roa (raw, json)
Hash identifier:          ioBrKwpKicWHiMYbBkEIfkIZSF2sWTPMKpxtge0vFHs=
Subject key identifier:   D6:F4:85:F5:05:A2:50:B8:ED:B9:FA:07:99:84:A5:26:56:D1:CD:06
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F43285847B1016A006BD9251DD36E9300
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/d63bb1e4-cdb9-314e-87e1-f0a42dbd792b.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     399250
IP address blocks:        198.175.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:6a:00:6b:d9:25:1d:d3:6e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=b6d669c5-502e-4899-a97a-3342473a5a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:b2:08:dd:ae:6c:1a:79:2d:82:29:88:ce:
                    a2:bc:8f:9d:08:f2:9c:24:e6:da:0d:3e:5a:69:ae:
                    f4:44:7c:4a:53:8d:24:c3:84:8f:9c:20:6a:82:7b:
                    b8:d1:85:a5:81:30:fd:4f:9b:21:df:99:4d:b1:a8:
                    cd:11:3a:84:76:9e:21:fc:55:97:0b:f0:a9:c5:b6:
                    f0:d2:bd:8b:c2:6b:c5:7f:b5:e3:73:e9:63:82:f1:
                    46:7e:95:8c:91:65:00:35:56:2f:74:d9:d6:27:20:
                    c5:80:f1:e4:a3:6c:af:b0:d3:b8:c3:ad:30:bc:54:
                    53:33:3e:8e:60:5e:5a:d7:0b:36:3c:53:2e:a8:5c:
                    e1:57:db:bc:e5:a0:49:cf:fc:f4:27:1c:61:61:83:
                    ff:1d:ca:49:df:41:ec:1f:ec:06:34:62:9d:40:90:
                    c2:dd:b4:69:a2:d1:22:81:57:bf:6a:74:e2:b5:89:
                    6e:69:c4:59:d2:ff:88:e9:b0:22:8e:17:72:e8:a8:
                    f1:2a:6c:74:10:d9:7f:21:c0:48:77:5d:4d:a0:98:
                    d0:6a:e2:9b:de:0c:f4:87:39:97:25:4c:e5:ad:2d:
                    aa:4d:9e:43:f5:64:a1:7c:be:4e:ee:da:e4:86:2c:
                    59:7a:35:fb:c9:ed:8c:25:ef:32:d3:ed:aa:92:fd:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F4:85:F5:05:A2:50:B8:ED:B9:FA:07:99:84:A5:26:56:D1:CD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/d63bb1e4-cdb9-314e-87e1-f0a42dbd792b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:51:07:bb:1a:15:ad:9d:fd:a3:83:23:f0:a5:44:1e:80:22:
         22:60:f3:b8:6c:54:9a:f6:5f:23:0a:b0:88:98:45:12:c7:7d:
         9d:e2:a8:61:92:40:e5:dd:e3:a9:9e:79:f7:48:07:ee:63:88:
         a4:3f:9f:05:14:aa:86:ae:bd:dd:48:42:4d:9f:41:87:27:33:
         4e:9c:24:53:9e:88:c3:dd:58:27:93:b9:cc:69:bf:fa:17:1b:
         d8:ec:cc:08:10:b5:ea:06:d0:a2:bd:9d:82:54:c7:29:9c:22:
         86:07:7d:ed:31:6a:9b:c0:f8:ce:17:6e:b0:a9:1d:fc:36:8e:
         b2:a9:9c:bd:f4:fc:3b:5a:19:08:22:1e:6b:c0:00:b6:92:a8:
         a8:8d:10:e8:b7:a6:de:a1:70:49:22:dd:d2:41:e4:34:29:0e:
         8c:38:68:e6:d4:0c:ce:84:d7:7d:14:e1:ac:cd:eb:61:2b:63:
         61:31:32:d9:21:00:31:1d:38:85:75:84:7f:e3:89:c3:0d:b1:
         5a:5f:60:7b:50:b4:c6:1f:0e:73:53:af:90:8c:36:3d:aa:37:
         69:b2:5f:c1:d6:93:d0:02:04:88:7a:21:d7:b7:1e:63:f7:94:
         55:a3:c4:59:6b:65:04:1f:56:19:2a:84:cf:07:02:46:08:88:
         e4:14:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org