Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
File:                     5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (raw, json)
Hash identifier:          0+gBKHeIwbl5NuIprLKXMyo9vo3p185A0qCIn0AtG1M=
Subject key identifier:   D9:77:20:60:DB:03:0F:99:17:C8:8C:A2:AD:FF:2C:A1:54:BD:8E:05
Certificate issuer:       /CN=4047a12d-1fef-4e6b-b868-76444464eabf
Certificate serial:       010D0C9F43285847DC64AA9D15BAE3B5A2C95880
Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     15199
IP address blocks:        140.160.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:aa:9d:15:ba:e3:b5:a2:c9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=5ee3345a-4bd0-45c5-ba04-541c0e0ad44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:d5:02:6a:83:5e:5f:b5:6b:b3:05:63:78:
                    ce:c0:71:ef:79:20:22:b6:07:1f:fb:d6:8b:01:49:
                    4b:fa:9e:f3:53:2d:9e:c8:3c:f4:a4:43:df:bf:d9:
                    37:f8:04:7d:61:d0:0e:e5:7f:ed:0c:6d:ad:10:f7:
                    3b:59:b7:b6:f3:4e:49:ef:3d:27:0b:3b:d1:df:f7:
                    3c:16:62:ba:08:62:61:22:71:61:e5:1b:bd:e6:72:
                    88:4d:8d:86:95:a1:68:f3:b4:6e:80:56:3f:25:39:
                    69:64:a2:b5:38:f6:b1:99:7d:36:fb:a4:d9:b5:84:
                    b8:73:89:6b:80:91:69:16:31:42:dd:ff:80:20:bc:
                    94:5c:39:9f:a2:76:c6:3c:2f:e3:fe:fa:4d:8d:6a:
                    b7:06:14:4f:5c:97:6f:69:fa:20:18:cf:74:3c:ef:
                    7e:5d:1d:c6:48:d5:32:99:1c:b3:76:17:e7:c4:a0:
                    42:4c:6a:21:3c:19:b5:83:09:56:b7:70:e2:42:84:
                    45:e7:63:ba:01:42:98:ea:5c:84:a8:16:50:59:b1:
                    8e:3c:df:ff:56:d8:37:16:dc:70:20:1d:c4:34:1c:
                    8b:46:9e:f1:18:d3:29:7b:16:75:ed:3f:9e:86:a0:
                    27:8e:8e:11:43:fc:d8:02:87:5f:1f:1b:36:e8:a0:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:20:60:DB:03:0F:99:17:C8:8C:A2:AD:FF:2C:A1:54:BD:8E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl

            X509v3 Authority Key Identifier:
                keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:69:cb:f0:5a:8a:53:07:39:d7:f7:97:98:d5:33:36:8d:cd:
         43:00:5b:0a:50:55:9b:7a:4c:c5:4f:31:a4:90:ad:97:ac:a7:
         60:4c:fa:fe:89:5c:15:f9:94:bc:92:d1:6c:d6:75:ba:60:a7:
         fc:14:ab:a3:29:e7:a0:5d:9e:ab:2e:07:d1:b8:49:75:8a:c0:
         9f:29:01:1b:6f:b7:5a:4d:4d:b1:f7:cc:90:82:6c:78:52:42:
         d7:2d:b7:89:29:9d:ee:e7:aa:31:3e:f1:8b:60:48:1b:4d:1b:
         05:ca:35:85:9d:5a:34:68:4c:98:0b:2a:c8:6f:8b:3b:1c:f9:
         82:ce:cc:47:e8:f2:f7:ec:17:82:06:b0:ae:16:9d:34:ed:a6:
         00:df:c6:87:49:6b:65:73:e0:0b:83:fa:d9:7c:5c:f5:ca:d9:
         88:9a:7b:97:69:1d:a2:2c:50:34:bc:73:a8:c6:b7:61:01:eb:
         e6:61:80:92:fa:45:03:4c:a3:09:cc:b3:3e:d7:04:6a:44:03:
         2e:99:df:5f:b5:f0:8f:81:a1:6f:b3:0c:a3:92:24:5b:96:90:
         d3:6c:25:45:17:54:ec:ba:be:db:59:1c:a8:82:44:0b:24:45:
         4a:5c:38:40:16:93:11:d4:27:f2:05:c5:15:ae:f9:c5:d7:7e:
         d2:8f:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org