Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa
File:                     1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa (raw, json)
Hash identifier:          BWKzMSBbZXyweSoFulkAXWeyoq8SQ0+PSxol9KV3W/c=
Subject key identifier:   15:5B:C0:28:06:AA:90:D1:A8:58:47:E2:23:48:B0:74:E8:C5:75:62
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584509556D984C2863972734D998
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     262287
IP address blocks:        198.145.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:6d:98:4c:28:63:97:27:34:d9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=0fae81ec-7858-479c-9fe5-f11856919169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:45:3f:51:7e:1a:28:d3:d4:be:bf:40:69:c9:
                    fc:78:3c:8a:18:a6:bc:b0:05:fc:19:63:70:bc:18:
                    7d:c3:c0:14:13:84:67:10:63:15:3f:02:84:f8:8d:
                    4e:b7:5a:50:df:4b:4f:d4:0b:55:e3:63:0b:5c:5c:
                    8e:25:ce:41:81:8c:c0:5e:e4:b1:a5:69:93:07:8b:
                    41:43:65:eb:7c:49:8d:b1:16:16:58:ee:14:80:73:
                    8d:27:75:9f:01:33:25:87:40:69:17:03:cf:32:a1:
                    3f:22:22:72:e1:40:ff:90:40:8d:04:91:64:91:f1:
                    99:ab:6e:cc:26:ce:5f:22:57:cf:24:5b:1e:0c:e3:
                    62:33:f1:99:f4:50:d2:2e:3b:8e:61:b5:9f:67:9b:
                    54:f1:29:93:9c:8f:b3:2c:3b:09:df:f9:7b:ca:7d:
                    66:28:7b:03:0b:ec:b6:09:81:3d:7e:4d:29:44:ce:
                    6d:17:f8:d4:a4:57:f1:ac:f6:17:ca:5c:a8:17:b6:
                    ef:4d:1d:f5:47:be:13:eb:fe:53:b1:6c:ad:a6:b7:
                    9c:c0:9d:5b:cd:e9:88:15:b9:6d:63:c3:dc:9c:35:
                    b4:e7:1b:e3:f8:48:fe:68:e1:10:a3:38:01:a5:33:
                    cb:5a:f1:d1:f2:6c:67:4f:2e:3c:21:b0:6e:56:20:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:C0:28:06:AA:90:D1:A8:58:47:E2:23:48:B0:74:E8:C5:75:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:f5:20:70:63:27:5c:f1:68:b8:ae:6d:80:01:36:27:1a:
         95:8e:e2:b5:5f:dc:c4:3a:c2:9a:2f:1b:7f:44:e0:b6:81:69:
         f5:ae:db:f6:4f:e1:a7:ab:cc:bd:b7:db:9b:99:6e:42:65:f7:
         df:bf:0a:b8:96:8d:83:40:4d:e5:02:58:45:19:23:ab:95:9b:
         17:08:9c:38:6a:68:14:16:52:d9:a1:64:c7:be:34:fe:e9:bd:
         4d:aa:73:05:d6:57:85:cd:da:43:3b:e8:1c:25:72:73:f4:ac:
         27:d8:1b:5a:7f:38:d8:b7:a9:cd:c1:8d:7d:d5:a1:88:d6:c6:
         87:cb:cd:8b:d8:48:82:a6:5d:0c:07:ad:77:86:22:24:79:1e:
         55:28:23:10:b4:43:a5:57:30:6f:ba:4d:20:31:19:3e:b6:1a:
         70:17:13:f6:d3:cf:64:23:b0:99:c1:a5:d1:61:03:e5:e0:62:
         a3:b4:8b:78:50:97:9f:f7:15:f9:7f:48:86:db:fc:00:3b:28:
         4e:c4:d8:0a:1f:d4:c7:2d:b6:37:47:77:91:c1:94:ef:7f:f5:
         3d:f6:7a:a6:ea:d6:5a:7c:25:7d:db:8a:89:f6:86:78:ee:85:
         7f:d4:4d:fa:f0:9f:09:83:ea:2c:64:ae:22:01:0b:a0:26:70:
         be:48:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:39 2024 by rpki-client on console-ams.rpki-client.org