Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4475cbcf-ec36-302c-be91-c8cd28ea1c6d.roa
File:                     4475cbcf-ec36-302c-be91-c8cd28ea1c6d.roa (raw, json)
Hash identifier:          Jo3pMvCAdeXoCbkqaNEykHadpsfCg8zG0Tl22Nk3z7M=
Subject key identifier:   0C:43:9F:78:8B:1B:65:2C:82:4E:A2:F6:10:A1:80:17:99:4B:9F:80
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285845759F405CF42C700B06E88380
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4475cbcf-ec36-302c-be91-c8cd28ea1c6d.roa
Signing time:             Sat 06 Apr 2024 20:56:31 +0000
ROA not before:           Sat 06 Apr 2024 20:56:31 +0000
ROA not after:            Fri 05 Jul 2024 20:56:31 +0000
asID:                     55154
IP address blocks:        216.144.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:75:9f:40:5c:f4:2c:70:0b:06:e8:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Apr  6 20:56:31 2024 GMT
            Not After : Jul  5 20:56:31 2024 GMT
        Subject: CN=95cfde9c-5a36-4037-8cce-0081f6dba51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:fe:7e:69:68:2c:45:c7:3a:f8:65:71:d2:
                    06:ea:02:47:42:74:96:cf:7e:a8:da:e8:cb:9a:52:
                    de:c7:02:93:d2:95:5b:97:ed:4d:d2:3c:b0:f1:60:
                    61:b3:28:12:17:c1:58:53:04:24:e2:12:c2:59:39:
                    58:b2:c3:c6:c7:c0:c2:b1:65:08:17:76:99:65:71:
                    76:6c:ae:1d:f0:b8:ef:e4:f0:28:ee:76:c0:4a:0a:
                    e3:a4:74:14:d3:d7:3e:32:a7:ad:a5:98:a5:84:d5:
                    81:5a:45:b7:a6:2e:83:b3:dc:a4:91:87:31:03:f5:
                    ba:1e:fb:15:d2:6b:60:df:f0:22:26:f1:d6:3a:5e:
                    43:97:b6:3b:c8:ca:22:31:6d:13:af:7c:1b:11:5c:
                    27:1e:dd:bf:0a:68:9d:d4:57:68:20:c1:fb:b6:50:
                    66:9c:35:6d:81:56:95:7c:90:c8:e1:64:6f:d8:fe:
                    52:fb:dd:5f:6e:e1:9c:45:8c:38:af:a0:67:7e:b2:
                    d6:44:87:ac:42:e7:a4:2f:77:89:01:e1:98:68:2f:
                    1d:5d:87:e9:f8:35:d6:5f:37:93:d4:40:3f:91:5e:
                    d3:30:ee:29:79:f2:5e:d6:3a:8a:8f:10:02:24:a0:
                    26:35:af:27:0b:ae:94:33:be:d9:a9:c0:e8:14:30:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:9F:78:8B:1B:65:2C:82:4E:A2:F6:10:A1:80:17:99:4B:9F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4475cbcf-ec36-302c-be91-c8cd28ea1c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:44:d8:40:93:fc:e7:0c:41:af:01:0c:e5:d8:27:84:ab:fa:
         13:b4:4b:e3:fd:cd:89:9e:35:ad:bb:40:10:ed:a7:cb:57:03:
         c8:e2:47:59:15:ed:75:ba:97:9d:30:44:02:73:c7:c2:9c:13:
         40:5c:02:f8:39:84:7f:32:72:9c:3d:32:66:fa:39:19:4c:50:
         81:43:65:0b:71:73:ab:38:72:41:97:37:a5:63:58:eb:b8:b6:
         8a:bb:7c:4f:51:66:01:3c:02:74:43:ef:7c:8c:34:5a:c2:36:
         13:07:1b:77:59:3d:fe:31:9b:1b:8b:28:7a:9e:fc:32:6d:e8:
         1d:60:fa:e2:4a:af:f8:10:9c:a7:21:a3:57:d8:52:1f:b5:8e:
         cc:27:dd:c1:6d:8e:9b:cc:e8:09:0d:4b:13:d0:ab:bb:66:e8:
         02:20:a2:6d:b4:5e:66:0e:ad:b8:ba:eb:e5:fa:e3:00:46:f2:
         d0:70:9b:83:32:82:71:66:af:fd:bc:79:64:b6:07:e3:b9:48:
         17:bb:24:b7:10:8c:3b:15:68:ee:c5:d7:30:8a:fb:3e:1e:b0:
         35:fe:ff:04:b7:8a:9b:50:30:8c:c3:24:fe:b7:b5:af:6b:92:
         a7:03:57:68:82:18:fc:65:5d:87:45:49:de:c2:14:25:4e:d4:
         57:93:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:30:53 2024 by rpki-client on console-ams.rpki-client.org