Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa
File:                     60a1323c-203e-3098-b964-667c4099d08a.roa (raw, json)
Hash identifier:          hsnYoHqIrRObTmPuP49Pa1avQweVtFiT+jeikSny+KM=
Subject key identifier:   67:15:FE:C7:C6:2E:31:ED:E6:50:D7:B1:A5:DA:6D:13:10:E6:EB:F6
Certificate issuer:       /CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee
Certificate serial:       010D0C9F432858473A5B8F86B70ED996B95F7980
Authority key identifier: 0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     40350
IP address blocks:        158.51.226.0/23 maxlen: 23
                          158.51.226.0/24 maxlen: 24
                          158.51.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8f:86:b7:0e:d9:96:b9:5f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b87ca4a0-ea78-460c-af74-fb5a918efd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:49:16:44:38:47:b0:5f:c8:ed:5b:60:9a:
                    5c:3e:ac:0b:c8:25:a8:0b:51:d2:f6:89:8f:f9:ca:
                    0a:f2:ab:5e:2c:d5:63:b4:a5:e1:d7:60:94:31:5b:
                    38:06:f6:32:94:de:6a:53:2e:43:9d:11:37:27:b8:
                    2a:a2:19:f2:dd:e4:84:5c:e7:bd:7a:e0:5c:da:ec:
                    bc:0f:18:a7:f2:99:20:7b:01:6e:c8:4e:8a:eb:b3:
                    42:9b:7f:ab:ab:17:81:15:6d:8c:94:bb:e1:30:0e:
                    c5:93:e6:53:15:4d:db:3b:0b:01:79:ce:33:af:01:
                    92:08:42:5d:3a:2d:a5:28:1c:2a:53:91:73:6c:98:
                    dd:cb:0a:1a:bd:9c:50:16:68:6d:63:84:91:96:7e:
                    e6:fe:bb:a3:25:ea:ad:19:f2:07:d3:16:54:f3:ee:
                    5b:8a:1a:ab:e8:b5:f1:36:49:90:11:39:68:7e:51:
                    1f:b7:cd:30:59:dd:9b:59:4e:bf:cd:71:f8:68:02:
                    60:c4:d0:ce:45:38:50:ea:66:e5:40:a8:a6:e7:5b:
                    7b:d1:c3:bf:7b:cf:65:a0:ad:96:8e:c9:64:9a:f9:
                    09:15:9b:ec:66:a0:99:90:47:f8:21:97:3d:15:b0:
                    0c:02:82:6c:82:19:1c:aa:2f:b7:3b:7a:a4:e4:30:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:15:FE:C7:C6:2E:31:ED:E6:50:D7:B1:A5:DA:6D:13:10:E6:EB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl

            X509v3 Authority Key Identifier:
                keyid:0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:ab:2c:0a:57:f9:af:6f:ac:a6:df:2b:03:93:bd:19:63:
         a1:fb:4e:f3:07:09:68:72:bf:9d:76:6c:a0:81:ee:05:57:60:
         e9:a3:be:c7:5d:d8:36:b6:a8:b3:43:bd:64:82:b9:af:cb:47:
         b6:44:86:ee:db:a4:e1:b6:21:f1:f3:d0:5a:0a:67:8d:01:8a:
         1c:50:1b:f8:58:e6:a8:52:16:4b:13:39:36:0a:0b:e8:be:ca:
         52:be:e5:d9:08:88:c1:e2:1e:fd:0d:d6:e4:c7:dd:6b:15:54:
         2e:e9:c7:0a:ce:ca:64:59:00:2b:dc:0e:a2:e9:34:9d:79:3e:
         b1:e3:16:a7:b9:4b:07:0d:f3:d9:17:10:2c:48:9d:03:e3:e9:
         1e:e7:ac:c1:87:0c:7d:50:61:7c:23:c6:9a:9c:32:43:83:6a:
         62:ff:e3:8f:dc:d5:f4:bc:1f:24:08:a4:43:51:87:31:fc:25:
         74:f2:97:f6:07:90:5c:b4:d1:46:92:18:eb:5d:49:df:a7:1a:
         3a:d7:aa:34:99:5c:b5:04:29:b2:54:a0:1f:b9:ce:1f:73:5d:
         a7:31:28:07:55:85:fe:ac:98:f3:91:fe:05:52:06:f0:25:b6:
         26:5d:2f:28:2b:f6:1f:94:b1:3b:73:c6:47:ae:21:d9:87:e7:
         09:f7:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org