Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          8FJEYCmYC7YWpR0Q5oo4Sn7A5QEL5EJduG3qvq/doIY=
Subject key identifier:   FC:4E:7E:47:55:FF:67:7E:2B:6E:53:29:42:E8:4E:3D:3E:FD:42:FC
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F43285847537B6CFF1E4464A7A8C2B680
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6c:ff:1e:44:64:a7:a8:c2:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=034d8b4a-c38c-44ba-99cb-112f181a2e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:06:09:03:e5:f9:fa:03:43:b1:c2:db:26:
                    25:f8:8e:79:16:22:e8:51:3f:d8:34:84:dd:01:e2:
                    6d:76:a3:4c:e8:e9:64:e8:42:9b:61:28:bf:ac:a8:
                    3b:df:6b:3e:7f:00:31:74:44:17:99:49:69:90:a5:
                    97:2b:c3:46:b4:a4:60:24:9f:86:3a:63:0a:21:2c:
                    e0:c2:26:ea:b5:b6:22:a1:10:de:9f:bb:e3:53:90:
                    e4:32:4e:ac:60:96:22:9e:46:88:fc:bd:9e:85:9d:
                    b5:e6:b7:4d:51:49:e7:2f:77:b1:ae:c8:7a:92:50:
                    45:23:54:dc:f7:2e:d1:21:56:9d:97:a4:86:ed:c5:
                    38:0f:a1:0f:d6:b7:ca:1f:59:32:ea:7f:79:cf:45:
                    ca:2a:fd:34:d4:ae:7b:74:bf:fd:db:26:b3:0c:4f:
                    89:bd:cb:52:65:c9:3b:9d:2e:92:68:89:ad:0c:59:
                    d2:d5:6c:32:00:f8:db:53:fb:49:f2:be:dc:4c:0a:
                    b8:84:fa:14:b8:3a:6c:2d:e7:0e:d7:35:d1:1d:f3:
                    71:af:79:d1:79:78:21:ae:22:cc:81:07:ac:55:54:
                    8c:22:8f:14:19:bb:9d:45:69:c3:2d:e5:06:26:ba:
                    6a:b6:35:50:e2:af:aa:11:7d:b9:01:6b:7f:b4:bd:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4E:7E:47:55:FF:67:7E:2B:6E:53:29:42:E8:4E:3D:3E:FD:42:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:de:43:30:7d:5b:c0:ff:38:19:4d:4a:66:af:70:ba:2b:
         2e:e6:a6:40:49:1c:b9:ee:56:60:22:9f:ac:69:51:07:22:c4:
         e0:66:c1:e5:fe:18:56:e0:db:e2:2a:49:70:80:9d:0e:74:05:
         3d:9c:f8:32:c1:1a:bd:7e:94:7b:d9:51:fa:c2:a8:db:98:14:
         c5:9a:c6:ca:cc:68:f1:a2:6a:c9:43:56:c0:ab:ab:ca:13:8b:
         e3:4f:6a:a3:9b:dd:7d:d6:91:46:71:ca:fa:28:31:5c:d0:f8:
         34:ec:ab:47:54:dd:83:c5:36:fa:f3:e1:76:38:2f:56:1f:31:
         51:09:00:cc:b8:10:ed:9a:52:7a:99:bf:ba:8e:5a:67:74:32:
         d4:88:64:b0:dd:3c:cd:ed:f1:97:d6:a9:ef:6c:5f:bf:e3:78:
         9d:c8:42:d7:ce:88:13:b9:dd:12:df:ca:5b:ab:d4:45:85:5c:
         59:f7:a8:4a:78:b4:50:d3:16:ea:0f:f8:1e:db:e8:17:57:25:
         c7:f2:ca:13:fb:d9:5a:25:e9:a6:de:c3:2d:55:d1:3f:0a:8f:
         fb:be:d8:74:ad:04:4c:5e:52:e3:1b:b5:4f:05:0f:06:96:ea:
         a5:f3:07:93:9f:c9:2d:25:11:eb:81:a9:d0:fb:b6:44:7f:f4:
         a6:20:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org