Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa
File:                     918dea34-b898-36d2-8228-5e0fa36a7f73.roa (raw, json)
Hash identifier:          fP4WZJmkK5zULCEouUZ/JZbviZiO296zLp9OqhvxNtM=
Subject key identifier:   84:DB:AA:99:8B:AF:5F:66:A1:2E:B9:B4:BE:7D:6D:A6:40:A9:16:05
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844F89556E4B0F2C8D2EA3CB500
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     9009
IP address blocks:        172.98.166.0/24 maxlen: 24
                          45.33.158.0/24 maxlen: 24
                          172.98.165.0/24 maxlen: 24
                          172.98.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:56:e4:b0:f2:c8:d2:ea:3c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=7eddd649-7e68-45f8-92cf-0dda20a97d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:eb:47:a9:27:b2:26:e5:8a:c1:b2:71:cc:
                    e1:0f:c2:73:cd:5c:58:c0:89:fa:1f:f8:20:21:bc:
                    49:3d:70:61:e1:eb:cb:40:50:88:6c:af:2c:b6:2f:
                    2d:95:74:24:54:68:a9:11:56:27:b6:3a:e6:0e:60:
                    34:e9:a4:b0:69:b0:f5:b0:5d:b5:8b:28:fa:55:0b:
                    6d:bc:b8:54:90:f2:8e:e4:48:a4:85:e7:0d:1e:58:
                    e7:40:58:0f:7b:4f:34:27:07:81:7f:a8:ac:1c:52:
                    06:b3:81:4a:3c:f3:e8:69:c8:eb:45:6f:d9:f1:25:
                    25:4b:eb:2e:1a:2c:4c:70:5e:21:c2:be:0d:28:f7:
                    8a:1a:9c:92:11:55:20:f2:28:e0:15:28:83:43:88:
                    3f:8c:0e:03:a7:85:e4:54:f8:58:e1:94:8c:88:34:
                    4c:99:ec:f7:31:01:7e:9d:e5:6b:fb:6c:96:49:93:
                    db:e2:4a:df:ee:68:e8:7a:e5:f2:c3:cc:83:ba:ff:
                    3a:7f:54:9c:32:81:8b:d4:f3:80:a7:c9:00:be:3c:
                    88:6c:a7:24:15:de:a9:21:90:77:c4:9b:33:44:59:
                    08:f6:51:b1:f6:c0:44:de:a5:31:63:5d:a5:cd:c1:
                    60:7d:4e:9c:17:4d:40:bd:a2:22:95:49:8b:ec:4d:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:AA:99:8B:AF:5F:66:A1:2E:B9:B4:BE:7D:6D:A6:40:A9:16:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.158.0/24
                  172.98.165.0-172.98.166.255
                  172.98.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:dc:27:be:d1:b3:52:39:71:f0:8a:b5:12:04:58:34:33:
         4f:19:79:04:72:18:6f:1d:05:9f:41:e8:fd:22:21:c1:6a:3d:
         29:30:8e:14:be:c2:1f:b4:6f:f7:aa:b5:8a:04:22:08:63:79:
         dd:5f:4b:0b:4f:8b:40:82:69:44:b2:df:01:19:69:3a:44:02:
         de:af:7a:b7:00:21:7b:79:93:ae:e8:37:be:19:c5:9b:9d:51:
         20:2c:24:fe:c3:59:c7:b7:fa:9a:bb:2b:35:ae:39:35:7c:0c:
         67:13:36:b3:30:fc:ac:eb:59:22:f7:94:fb:53:92:d7:3e:d7:
         9e:2d:06:f2:3c:04:09:c9:6c:45:20:3f:ed:24:f9:b6:e1:84:
         96:49:93:da:82:95:e7:03:a5:1c:8b:27:89:6b:c9:b2:8f:c3:
         04:36:83:47:84:5b:c1:a1:ec:28:94:2e:cf:cc:12:06:17:13:
         40:79:02:55:c0:37:97:fa:09:be:56:34:ea:24:22:73:53:1b:
         e7:57:4d:03:72:52:29:df:21:76:9a:ca:eb:aa:8e:4e:4f:bd:
         70:a8:d3:55:32:60:85:de:3b:8d:e2:c7:ba:f7:57:7d:53:85:
         01:cc:a5:76:7f:65:3f:4f:6a:e7:fa:72:a3:62:dd:9c:35:51:
         e2:78:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:04:51 2024 by rpki-client on console-ams.rpki-client.org