Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
File:                     ce18774d-344f-36c4-9f23-6fece962f73e.roa (raw, json)
Hash identifier:          UEMBxN3IPjwickNBJ0L/p0epLiFyDnT024p3Kh1/8EA=
Subject key identifier:   31:B3:DC:CB:80:23:81:D8:D0:10:34:A4:14:34:E5:86:3F:4D:25:9C
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858473D2FAC22D778148EB4467140
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
Signing time:             Tue 17 Sep 2024 01:20:19 +0000
ROA not before:           Tue 17 Sep 2024 01:20:19 +0000
ROA not after:            Mon 16 Dec 2024 02:20:19 +0000
asID:                     2559
IP address blocks:        198.241.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:2f:ac:22:d7:78:14:8e:b4:46:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 17 01:20:19 2024 GMT
            Not After : Dec 16 02:20:19 2024 GMT
        Subject: CN=d8a90ce5-0b35-4f0f-b526-9fe1f3a2219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:ea:38:18:0d:6e:66:33:4c:6d:90:25:99:
                    64:55:8c:c2:18:5c:46:ff:d4:55:5e:41:29:30:b3:
                    64:81:d8:51:d0:34:aa:23:dc:d6:53:60:d1:10:96:
                    d4:59:00:de:33:b2:73:35:d9:e1:3f:de:ae:eb:bb:
                    54:24:91:51:f3:a7:8f:a0:03:69:a3:e4:98:a9:13:
                    cf:60:14:43:27:74:bf:4b:0b:82:d4:20:81:46:4d:
                    9f:ba:ff:bc:d0:7a:0b:0e:7d:a0:6e:c1:29:9d:c6:
                    3e:e8:f7:25:00:f0:cb:9d:44:89:7f:f7:2c:b9:79:
                    70:35:98:d3:5a:74:f7:ab:2e:25:f0:0d:c1:83:a9:
                    e2:8a:32:94:3a:ee:b2:d9:cf:32:87:91:79:d3:94:
                    1e:f3:c6:c6:01:6c:27:0b:7d:8c:a1:27:eb:13:c0:
                    55:47:60:41:3f:4d:d2:46:7e:ce:a0:ce:cd:59:64:
                    61:05:d7:57:2e:bb:33:76:82:a9:24:5a:6f:51:be:
                    2f:5f:7a:a0:db:72:ab:52:89:e5:88:5b:77:8a:bd:
                    a6:41:6e:d3:07:3e:61:74:d8:bc:e6:cf:13:59:d3:
                    57:75:12:a8:53:fa:20:0e:47:52:aa:04:3a:1c:63:
                    2f:19:6a:92:df:3f:c0:94:61:ce:7d:1f:31:86:d6:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:DC:CB:80:23:81:D8:D0:10:34:A4:14:34:E5:86:3F:4D:25:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:81:64:b2:0f:ac:4b:19:60:f7:dc:31:7c:e6:d0:94:b8:63:
         80:b9:41:d3:18:a2:a7:04:21:9d:54:ac:36:66:20:38:91:8b:
         b5:ff:95:3a:45:b1:06:a0:2a:f1:7f:d2:57:c5:3e:c5:3c:32:
         d7:13:73:13:f9:53:23:2b:44:64:84:44:d0:19:e3:ee:47:68:
         ce:98:f0:6e:ae:2e:85:80:94:de:37:92:5c:67:58:d8:79:21:
         15:45:a1:a6:72:1d:0d:95:4e:73:95:56:d9:ec:3f:0c:50:2c:
         0f:21:f1:a8:ae:08:83:22:cb:f6:6f:c6:e5:8a:31:92:cd:4d:
         2d:b6:b1:cc:b5:b8:a6:4f:ac:d8:af:b0:f2:8b:84:60:72:d7:
         2b:a3:e6:57:e0:85:cf:9b:3a:a7:a5:f7:35:a6:8e:01:63:30:
         d9:9b:cc:ac:ec:ff:5d:4f:5e:7a:ab:fd:e4:d3:c9:73:5d:eb:
         ab:88:16:a2:85:cc:cd:0b:de:75:18:7a:10:fc:2c:57:24:d9:
         cb:bf:0d:b3:5c:c9:d4:ad:29:c3:23:ed:27:bc:b3:0b:1f:3f:
         fb:f8:0a:08:ce:fc:90:92:92:89:06:47:e4:b9:bf:47:41:3d:
         17:22:18:03:1c:b5:cc:41:8b:57:93:29:0f:8e:51:a0:03:4c:
         40:c4:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:29:16 2024 by rpki-client on console-fra.rpki-client.org