Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8fcaad-6c26-3fb2-ae57-ed432bc64af1.roa
File:                     6e8fcaad-6c26-3fb2-ae57-ed432bc64af1.roa (raw, json)
Hash identifier:          DFTZj4Ofar+ex4gtLqTuyLH4U7f5Ddh5tx0oHSTHEaA=
Subject key identifier:   FA:F7:C0:B4:E2:6A:1C:DB:6C:8C:85:E8:FE:90:EC:31:FC:15:D6:85
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1449B6D8BA6F1F96B8CE0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8fcaad-6c26-3fb2-ae57-ed432bc64af1.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        151.101.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:44:9b:6d:8b:a6:f1:f9:6b:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=c5ffad25-e810-41ce-ae61-cd31c82d2208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:ae:2a:64:4c:ac:87:39:21:85:c9:1a:39:
                    19:96:a5:05:ff:00:cf:eb:86:65:39:d0:0e:ac:b1:
                    ae:06:3d:27:6c:9a:e7:b7:4b:36:cc:ee:a8:f2:4f:
                    00:f1:b0:b6:c4:4e:1c:c2:00:d1:d5:d7:30:4a:60:
                    90:16:1d:32:11:ba:b9:95:92:1e:da:f6:16:23:32:
                    50:75:bb:32:3c:c8:07:14:c9:cf:23:92:8d:cc:91:
                    ce:24:be:97:fa:eb:df:86:47:cc:4d:58:d5:64:81:
                    08:5b:75:f1:5c:58:ed:f1:da:ef:65:70:15:df:d8:
                    7b:5b:b4:ac:aa:f3:c5:a4:b5:4e:6e:2b:ba:97:5c:
                    16:f7:16:8e:03:43:c8:7d:4b:29:84:f2:7f:db:94:
                    c6:8b:b7:24:fd:05:4f:d0:e0:b7:52:21:85:55:b2:
                    e4:d5:4c:a4:41:15:8d:2d:50:10:85:5b:a2:74:d3:
                    a1:94:3b:39:dd:6a:01:40:cd:e3:8e:f7:18:51:5a:
                    47:eb:43:ee:52:3c:b7:fd:00:b4:10:f5:3b:ee:89:
                    45:3a:9a:c1:97:2f:5f:93:b2:7e:40:fd:89:ca:72:
                    12:68:27:58:39:4c:30:c6:96:81:8f:93:df:74:82:
                    c6:12:6b:34:4c:e6:cc:4c:d2:5d:67:e9:2c:7a:bc:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F7:C0:B4:E2:6A:1C:DB:6C:8C:85:E8:FE:90:EC:31:FC:15:D6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8fcaad-6c26-3fb2-ae57-ed432bc64af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:78:ba:b8:64:05:de:42:ff:af:4c:3e:81:1e:ec:b3:7c:69:
         85:54:42:9a:f6:15:1b:d0:33:17:e0:60:bc:3d:b1:7e:9e:a0:
         b0:c4:01:c1:ca:92:66:a3:91:a5:f5:f8:0a:f4:a9:79:d3:83:
         9d:8f:fc:b6:7d:27:a7:e5:9c:ce:3f:91:cd:4a:f2:d1:9c:0f:
         b5:c5:73:89:62:12:6b:a7:a4:00:61:da:20:f1:a9:d9:db:53:
         3d:b5:f1:69:8e:d4:44:8b:7c:be:11:af:23:77:d7:23:34:16:
         c3:c6:4d:af:7a:1f:e5:5e:bc:15:12:88:78:2c:3c:c3:fb:43:
         b3:be:37:1b:ba:fc:60:a3:0b:b4:da:1a:5b:85:ee:2b:89:bc:
         e8:a3:0d:7d:8e:66:f1:db:f9:d7:2e:35:0d:d5:b4:01:20:8c:
         72:b4:3d:cb:81:50:01:d3:71:aa:78:83:da:cd:30:32:7f:f3:
         55:ef:c7:66:2b:4c:31:84:51:29:f1:bb:81:66:8b:a3:a0:64:
         52:f5:53:85:0c:71:d0:f2:53:e6:f8:6d:01:f9:35:aa:af:47:
         8a:47:ac:d9:5f:42:c2:e8:50:88:13:d5:a9:57:d4:3b:36:3e:
         16:62:24:3c:1c:cb:18:92:7b:d9:aa:7b:7c:fc:84:eb:53:24:
         7d:22:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:30 2024 by rpki-client on console-ams.rpki-client.org