Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d3056b3c-d85d-3503-982f-f2f64b79dc70.roa
File:                     d3056b3c-d85d-3503-982f-f2f64b79dc70.roa (raw, json)
Hash identifier:          MnzBfKq1LlQ/xG/ssINNCILkMwdvSHIKNQL4D/y0GyI=
Subject key identifier:   86:98:9C:37:01:88:CF:60:8E:34:57:14:B2:41:38:63:D4:13:95:31
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285847CA3F795703E002F563CF8B40
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d3056b3c-d85d-3503-982f-f2f64b79dc70.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     206092
IP address blocks:        158.51.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:79:57:03:e0:02:f5:63:cf:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=fa0539bc-3226-444a-9246-f305639dfbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:23:da:f4:50:5a:a4:9c:d7:c7:e3:ee:fb:
                    01:b2:b7:2a:97:43:4b:b9:9f:71:0c:5a:e8:26:b5:
                    a5:dc:2a:2e:de:9c:3f:76:e5:5a:8e:b9:23:b5:11:
                    28:d6:9f:79:c5:cb:bc:d2:41:59:cc:65:5f:e1:e2:
                    76:b7:72:7f:13:4b:22:c1:6b:0e:6b:2a:50:b4:74:
                    9c:ab:fd:24:6d:ee:76:88:86:b8:43:96:b8:d5:2b:
                    df:fe:d0:eb:79:63:10:48:aa:f8:11:38:4f:b5:e7:
                    8f:fc:63:ff:36:42:e5:25:59:d6:3e:02:8e:27:72:
                    55:38:e7:48:11:ce:6e:02:8e:b2:40:e6:b1:30:bb:
                    d0:e2:af:a8:07:be:2c:e3:22:d2:70:d4:d7:1d:22:
                    c4:0e:1d:05:7b:61:f9:48:8f:98:af:39:c5:36:10:
                    0b:ee:c1:f8:90:65:94:b4:5e:96:de:b9:99:be:c5:
                    f4:4c:74:a1:e2:82:4a:b8:1a:e7:db:ae:0e:bc:2c:
                    48:ca:30:8a:f7:88:17:ef:a5:26:f0:1c:c1:52:73:
                    34:ef:b3:73:e3:8a:88:85:69:90:a9:8a:e4:39:e9:
                    cf:4b:61:ea:ff:ac:e2:4d:2f:6a:b2:ab:66:2e:6c:
                    1a:7f:e1:ea:19:88:c6:ed:f0:ec:26:4b:c8:1c:42:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:9C:37:01:88:CF:60:8E:34:57:14:B2:41:38:63:D4:13:95:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d3056b3c-d85d-3503-982f-f2f64b79dc70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:6c:63:3f:e6:d9:df:e6:58:e3:fa:28:7f:45:99:14:65:
         e3:61:54:54:66:03:2f:cc:95:26:b8:2c:71:93:63:93:21:e1:
         31:4f:74:07:1d:61:1d:d3:dc:39:61:32:3e:76:af:b0:bd:ac:
         f0:97:e2:11:3a:7d:8a:a0:cd:57:73:12:07:e9:9c:55:e6:52:
         cf:2c:84:2b:32:92:0b:fb:89:58:e8:fe:fc:d5:7c:4b:5f:1e:
         9f:09:1c:33:3f:99:c2:eb:3e:1a:36:ef:85:1a:77:12:8a:eb:
         d3:55:09:55:5f:3b:6e:97:bb:0c:4c:1e:3a:43:ce:24:d7:dc:
         8f:a4:38:3e:49:c8:36:a8:dd:8e:fe:e3:ab:d6:62:6a:4e:de:
         57:87:0b:f5:f8:ba:58:83:cc:b0:e8:0f:dd:59:d9:c1:ad:5d:
         ab:4c:16:15:26:ed:42:72:87:e2:3b:eb:fe:8d:94:a4:6f:89:
         bb:61:fa:50:e4:b8:93:df:a7:91:55:28:41:cc:0b:3c:84:66:
         92:0a:93:3f:5a:49:c0:f7:36:db:20:af:55:fe:96:70:16:27:
         fd:38:ba:98:84:ac:eb:49:5f:1e:48:48:8d:a9:a3:6f:60:6f:
         70:62:ee:a4:bb:51:d6:60:6c:e6:6f:b6:86:e9:2f:27:cb:90:
         93:15:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:47 2024 by rpki-client on console-fra.rpki-client.org