Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/47452718-44c7-3bf2-9f9d-c6a333c2db3e.roa
File:                     47452718-44c7-3bf2-9f9d-c6a333c2db3e.roa (raw, json)
Hash identifier:          MyICKXnLGRziVAGUnCpLRcz49YullCyyYq1opK10oUc=
Subject key identifier:   4E:07:2B:67:6D:D9:E7:42:C0:E2:74:D2:31:82:58:CC:17:5C:29:FF
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F43285847B7FBF4C7579CFDB9CFE18000
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/47452718-44c7-3bf2-9f9d-c6a333c2db3e.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     11377
IP address blocks:        159.183.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f4:c7:57:9c:fd:b9:cf:e1:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=a51b726d-4d3b-4bc1-879f-9aafe8cd800c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:65:3c:2b:73:9a:65:d9:fc:8e:99:d0:88:e8:
                    69:82:02:b1:da:95:ff:0e:89:19:df:31:53:52:7b:
                    36:2f:5b:68:85:5e:89:e8:ff:f0:6c:57:ab:fb:f0:
                    38:fc:58:30:de:c1:0b:23:93:7a:2b:34:20:f9:fe:
                    5d:ca:6e:6f:e1:3d:40:51:27:10:66:b9:0a:47:47:
                    b1:5f:64:5b:88:a5:37:e8:d6:b5:42:d4:b3:f7:bd:
                    d7:8d:3e:82:2f:30:3f:ae:e5:9c:e1:b3:dd:a5:8e:
                    bc:99:01:39:a1:d4:ee:ec:a1:0d:ef:46:2a:5d:9d:
                    6a:61:39:e6:3a:c3:d1:2b:3e:57:e8:8c:0e:56:f3:
                    bc:f1:7a:b4:c0:78:03:c8:fc:f7:77:2e:05:e2:d6:
                    36:57:72:80:ac:84:0e:8a:c2:81:07:c0:9b:14:12:
                    11:81:b6:13:d1:ba:f6:24:a9:8d:2d:d3:27:73:67:
                    58:1a:d9:92:f5:52:43:ad:96:84:7d:1e:6b:eb:84:
                    36:a1:8f:fa:9c:01:3f:0d:eb:49:56:94:30:50:50:
                    05:db:af:6e:43:80:4e:70:0c:ce:44:84:52:71:df:
                    36:e7:a8:44:69:90:4a:f5:72:ad:63:71:2f:7e:55:
                    49:cb:6b:e2:65:9b:d8:95:9b:04:02:89:e0:97:04:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:2B:67:6D:D9:E7:42:C0:E2:74:D2:31:82:58:CC:17:5C:29:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/47452718-44c7-3bf2-9f9d-c6a333c2db3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:24:63:ce:25:fa:8a:65:4f:8f:ea:82:2c:af:7f:c4:8e:d2:
         fa:bc:9f:01:f5:11:a7:7c:4f:ca:6b:d2:53:a3:c5:50:a6:1f:
         f3:cd:c1:18:a2:dc:9d:6b:00:44:ba:c9:3a:0e:1a:7b:b5:60:
         bb:e4:86:ca:e9:94:f2:72:ac:1d:0f:42:0f:74:a5:a8:a9:18:
         28:dd:a3:63:1c:43:b9:ce:14:8f:46:51:64:7a:2c:aa:e0:fe:
         a2:7e:43:22:37:ac:d0:78:14:dd:77:f7:7d:f4:e7:34:ab:7d:
         16:6a:98:4d:fb:47:e8:e4:8b:fa:68:e2:51:64:04:e3:f0:d7:
         13:26:a4:8c:1c:42:61:62:56:57:e2:06:68:28:ae:78:66:ff:
         01:e4:93:54:0c:ab:e8:13:4b:15:5d:f3:7c:d2:85:2b:17:21:
         98:fa:76:ac:2d:d0:4c:4f:cc:62:94:54:61:0d:a2:46:fb:8e:
         d7:59:ad:9f:cc:0b:92:b5:f1:d5:7e:b1:b6:2a:eb:a3:65:ed:
         33:8d:b9:83:1e:78:4e:c3:3c:6e:ca:3b:b7:21:4e:78:86:18:
         fe:f5:06:a8:e0:58:ac:dd:88:66:5f:e5:c8:68:22:51:b0:31:
         33:e5:59:7a:57:65:40:44:bf:cf:42:8f:23:7e:80:22:48:23:
         6e:2b:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org