Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa
File:                     18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa (raw, json)
Hash identifier:          pjG5XbxvE/smAHfi7Txzn/VgbJIc71rsJnNOZIK2awU=
Subject key identifier:   AF:4C:49:98:D1:0E:F6:90:DE:17:03:DE:DB:56:45:30:74:A8:81:42
Certificate issuer:       /CN=03a7a8d3-26fa-4915-bacf-2848f9754758
Certificate serial:       010D0C9F4328584526A5AB3775D28D22BFCBDA80
Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     400326
IP address blocks:        158.51.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:ab:37:75:d2:8d:22:bf:cb:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=49241d16-b031-4f9e-b018-5b8d63799804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:e9:92:23:fe:ce:f6:aa:71:60:e1:13:12:
                    de:f7:e7:ab:20:df:df:1d:cf:b9:3c:71:8a:0d:5d:
                    fb:ae:68:e5:8e:f4:6d:a6:0e:a9:c7:b4:56:dd:87:
                    d1:b1:1b:0f:7e:72:59:3f:a6:a5:6b:6c:c1:13:0b:
                    1f:46:b3:9d:3b:a6:72:ba:e0:9a:3f:b4:b6:2d:be:
                    82:0c:60:0d:ee:d2:c0:d5:30:c8:3c:a2:e7:fd:36:
                    3d:8a:1e:d2:20:fd:a8:a9:62:f6:0d:4e:5a:45:d2:
                    e3:5c:c4:8e:30:0c:9b:b6:e7:d7:36:75:45:b2:f6:
                    1d:25:28:76:71:b4:00:c6:d6:5f:ce:f4:9c:9c:97:
                    a0:f9:51:04:1b:78:12:ab:54:12:a4:e6:67:de:2e:
                    3c:88:ff:8c:12:70:06:a7:97:42:d3:78:7e:08:b1:
                    93:18:0d:14:85:ce:f7:ef:5c:b9:36:36:9a:00:74:
                    49:02:cd:e8:d9:bd:80:02:8e:b9:e7:fc:0e:b2:82:
                    11:1c:eb:72:8a:e9:a9:63:8e:c1:db:03:a0:73:04:
                    dd:b9:94:3f:e8:97:4c:6f:fb:53:eb:83:9b:6e:54:
                    29:91:3f:3a:55:9c:0a:3e:d5:95:69:85:71:40:26:
                    a7:c3:e7:be:bc:0f:24:5c:b8:bf:6f:bd:19:58:9b:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:49:98:D1:0E:F6:90:DE:17:03:DE:DB:56:45:30:74:A8:81:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl

            X509v3 Authority Key Identifier:
                keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:eb:41:ad:9b:bd:f8:1b:ba:13:ff:5f:30:22:7b:92:23:44:
         52:0e:c8:38:3b:dd:68:c1:3c:de:2a:5f:bd:c0:67:56:b9:bc:
         2c:62:99:a2:9f:75:cd:81:47:bd:2e:b2:56:aa:c3:e1:36:f1:
         ea:19:82:0d:58:ac:7e:14:e4:39:b8:f2:3b:36:4c:1e:1a:c0:
         fe:6f:9c:3f:34:ab:91:a7:4c:0a:33:03:c3:ef:85:dc:e5:92:
         cc:4c:4c:05:4e:92:18:b8:5a:c9:60:28:2c:9d:10:8a:f5:3e:
         99:37:cb:c4:62:ab:44:14:7f:f5:73:8e:88:93:dc:14:51:45:
         3c:d0:9f:46:79:c9:1e:15:bf:9d:6c:50:4c:4c:2d:c3:29:67:
         38:4e:ef:39:d9:20:f3:83:18:26:2b:4b:32:ed:e8:22:36:84:
         4d:67:44:42:d1:27:87:81:6e:53:29:20:0f:d7:cd:34:01:28:
         f9:70:1e:ce:5a:d5:16:0c:10:fb:a7:04:dc:bb:c7:75:39:08:
         98:d9:76:ad:05:5f:41:f9:fc:8e:23:54:e2:e5:f1:74:dc:4c:
         e2:52:a4:7b:19:72:0f:ec:f1:c8:01:fd:3b:e5:60:78:59:b7:
         34:89:ba:18:12:fb:dc:5e:eb:f7:f2:f5:b8:ea:80:53:ed:61:
         cc:75:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:39 2024 by rpki-client on console-ams.rpki-client.org