Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa
File:                     f7201aa5-0964-32a1-94a5-9389429ccd8f.roa (raw, json)
Hash identifier:          ai7No0Yf+nQsefhFllhaADzCsTLPW4fEf3YfzLbfYj0=
Subject key identifier:   D1:D7:E0:F8:C7:5D:3F:C4:8B:00:4D:B2:51:E3:D9:3D:ED:07:E6:78
Certificate issuer:       /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial:       010D0C9F4328584789EBFE79D9034803E309AC90
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     398655
IP address blocks:        158.83.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fe:79:d9:03:48:03:e3:09:ac:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=441b9496-e9ce-4e32-9db7-227a690401a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:ff:f3:28:1b:31:b6:09:78:b5:91:37:0e:
                    b5:9c:08:31:b7:b4:46:b0:61:eb:06:16:6a:7a:c3:
                    9f:0f:8e:c4:b0:13:d4:bd:14:75:04:1f:49:2a:36:
                    43:e6:cf:50:3f:e6:f8:43:99:ec:a6:c6:3d:ce:e8:
                    b0:d2:03:5a:3f:63:95:ab:e8:cd:2e:a4:61:31:58:
                    79:6a:be:3f:2b:7f:84:84:aa:9b:29:ec:57:d3:18:
                    59:54:0f:c6:a8:bb:a3:37:4f:4d:e2:a2:36:bb:6e:
                    1e:8b:7a:dd:d5:9e:f7:64:c9:3f:7c:fd:2e:1b:a5:
                    d7:20:10:67:38:7a:5f:54:ef:61:0b:d8:ac:97:02:
                    d2:85:ce:25:a2:4a:ef:70:b6:d6:7b:e9:ec:ad:dc:
                    73:ec:5a:17:1c:93:92:19:31:3c:0b:1c:98:0f:27:
                    06:b4:cd:f8:1f:c4:40:22:2a:44:f3:0e:5c:6e:71:
                    a7:e2:9c:a5:4d:24:c8:52:13:cd:6a:e4:24:39:f7:
                    89:82:9e:c0:60:a2:68:82:a8:ac:86:8d:5e:d5:de:
                    c1:2c:c5:45:2f:58:05:cc:e0:e8:91:dd:70:4c:31:
                    21:5b:94:4c:df:8d:c4:dd:06:23:0a:80:69:a0:f6:
                    62:64:31:bb:52:c6:e0:1e:68:00:96:1a:4c:9e:e8:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D7:E0:F8:C7:5D:3F:C4:8B:00:4D:B2:51:E3:D9:3D:ED:07:E6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:10:fc:c0:e2:a8:49:fa:34:26:89:50:4f:26:d7:6f:00:cf:
         5a:c4:a6:d8:22:74:86:0a:9a:37:e6:7d:98:f5:90:37:2f:60:
         f1:96:48:72:29:49:e1:aa:b1:f6:ef:25:ce:33:8c:d4:84:e4:
         a7:65:31:57:c7:fd:69:bf:61:a4:11:58:6a:2f:5d:7f:0b:d9:
         5f:73:9e:c4:a0:24:aa:bb:0c:11:aa:c6:82:12:23:4e:c9:6b:
         dd:aa:c9:2a:0d:02:1f:28:79:72:be:2c:cc:e4:d5:bb:90:00:
         0e:0a:43:e8:5a:ef:13:67:94:1f:79:5c:a7:fd:29:d2:9d:0c:
         d9:77:7a:b4:b6:84:04:00:d5:54:42:f2:57:73:ed:c5:90:55:
         5f:ab:10:16:88:ed:8e:a0:0d:b1:35:3b:2d:f4:83:d8:ab:26:
         6f:e2:e2:c9:52:78:67:96:ee:d4:d9:7e:44:b6:c1:d5:94:e5:
         a2:62:9e:f5:65:f4:6c:01:ae:40:5a:e5:4c:3a:79:98:f6:34:
         56:c7:62:b4:c7:eb:b8:cc:b7:50:ef:ec:a2:15:16:18:6a:4d:
         3a:c7:c9:d7:4c:0f:7c:6e:69:2b:5b:92:54:79:be:e3:7b:42:
         24:de:36:a1:50:01:a4:60:63:d2:b1:b3:47:a7:a2:84:18:a8:
         55:d5:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org