Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          dDC8J+qryEPuZ+L2pqnWkK7Ht7KcKb8FpZjIXT4WkwY=
Subject key identifier:   60:CA:05:9E:F1:31:F1:FF:39:50:8B:F3:C5:98:DA:18:A3:46:DA:20
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F432858454731DA953758D969E4EFC940
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Thu 21 Mar 2024 05:48:55 +0000
ROA not before:           Thu 21 Mar 2024 05:48:55 +0000
ROA not after:            Wed 19 Jun 2024 05:48:55 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:47:31:da:95:37:58:d9:69:e4:ef:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Mar 21 05:48:55 2024 GMT
            Not After : Jun 19 05:48:55 2024 GMT
        Subject: CN=75e92eeb-64c9-4f4f-9510-ed6820380d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:dd:21:57:0f:e9:2e:00:63:fd:cf:bc:d4:
                    a0:df:63:10:c8:c2:0a:57:30:e8:38:08:ec:96:52:
                    9b:24:82:7e:72:26:7d:73:c9:34:12:5a:5b:00:b9:
                    83:eb:da:d1:9f:4a:9e:15:29:ae:65:c1:70:43:a6:
                    39:e8:b3:88:4c:18:10:81:8b:4d:ba:f7:d2:50:6d:
                    aa:40:1e:b7:af:26:fa:8e:cc:ff:53:ab:1f:92:58:
                    5a:c6:cb:06:2e:1e:4e:f3:2f:a6:46:d8:8c:79:96:
                    91:89:6b:09:3d:e9:e5:00:22:b3:17:7f:bb:f6:81:
                    23:f1:5d:cb:11:42:4b:ca:f6:6b:d6:80:82:b8:88:
                    33:f7:8f:86:e3:aa:77:fb:45:0f:1f:12:3b:fd:fa:
                    b5:3b:fc:9f:c9:91:b0:b9:d6:92:d0:f3:43:90:e4:
                    36:2f:c7:a4:4f:a0:d8:87:1b:5a:f2:22:09:04:49:
                    d7:1a:88:26:8f:29:0b:ec:c3:f8:46:69:3c:20:b1:
                    0e:59:d7:d6:a1:64:c7:86:63:41:04:7a:8c:da:e9:
                    30:5e:b1:15:b1:e3:4e:37:8d:50:7e:5b:55:9d:54:
                    07:51:d2:b4:90:17:97:e9:74:cc:76:db:c2:45:84:
                    18:18:bf:e6:b5:ab:82:ab:e1:a9:52:8c:09:bc:47:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CA:05:9E:F1:31:F1:FF:39:50:8B:F3:C5:98:DA:18:A3:46:DA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:2e:39:63:61:7a:ef:58:68:94:07:80:92:55:9a:41:fa:
         61:05:50:cc:a1:40:94:da:1e:53:99:86:3b:1b:27:b6:99:f6:
         c9:f7:17:05:30:e6:85:55:bd:46:a9:b2:6e:61:e3:6f:48:d1:
         06:c9:9c:ef:42:e4:23:70:ad:7a:e3:97:2e:5b:22:29:13:f2:
         9e:d6:a9:1e:ee:ec:7c:ce:bb:2c:65:79:bb:7a:5f:a6:ad:53:
         8a:f6:b0:21:26:fa:15:a5:9b:fa:82:a0:8f:dc:d9:53:6e:d4:
         1b:16:aa:4a:04:b0:ba:b2:36:da:59:53:d1:3c:e5:2e:36:f7:
         c6:98:e2:6a:1f:9e:38:7f:19:f7:f6:9e:3c:9b:20:86:f1:a8:
         8d:60:a4:fe:7c:75:2b:fe:70:4c:c8:06:27:e3:76:d4:a5:9a:
         e2:02:fe:1e:4c:09:4c:a9:7f:cb:9d:29:4f:23:97:5d:a4:e2:
         43:86:91:bd:2b:86:d5:72:e4:3b:9c:a8:9c:2f:30:c1:46:42:
         57:5e:dc:b0:d8:b1:7e:1f:c3:2e:59:22:2f:82:bd:7d:ec:9e:
         16:ca:e7:33:c1:5b:4b:79:27:29:02:d3:ac:03:49:24:86:5a:
         dc:2e:08:b8:16:f2:4d:cd:69:4a:4e:a1:46:5d:3e:b9:03:e1:
         68:a7:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:50:51 2024 by rpki-client on console-fra.rpki-client.org