Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa
File:                     b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa (raw, json)
Hash identifier:          aTvc+DsVAxMGy2u+/NPZTuLFRMUeMyFSPk3S3oLtq/U=
Subject key identifier:   03:BA:57:16:0C:A8:9A:E9:01:23:69:D3:AE:B5:E3:0D:2E:20:C3:5A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1455C6D254BB9B3DBFA40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        151.101.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:45:5c:6d:25:4b:b9:b3:db:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=d2aec5a8-d36d-4177-9e34-b02bb04e5ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:80:39:1c:0a:60:80:a3:34:f7:dd:c2:e6:
                    15:64:e4:ba:e2:ec:36:a6:a3:80:52:02:01:48:65:
                    18:53:6f:01:71:36:43:8f:ba:0a:06:57:f1:70:66:
                    d5:13:03:f9:cb:72:7e:55:c4:77:9f:6e:31:54:dc:
                    ce:ba:1f:23:95:57:53:85:e2:bf:f0:7e:87:ce:f0:
                    b4:7a:73:79:c8:cf:5f:70:ec:d7:79:63:e0:7d:20:
                    73:c8:01:f4:f2:54:7f:62:79:4e:1c:c7:ee:3f:1e:
                    eb:71:d6:d5:58:72:66:b5:da:d6:e4:96:c0:9e:ea:
                    f9:6f:4d:9b:26:b7:9f:b7:d7:5c:94:c8:74:14:65:
                    a0:42:6f:30:1a:ac:3d:ec:b7:50:8f:4e:8b:9b:85:
                    67:0c:3f:94:e1:d0:2b:67:89:a8:47:6a:b9:97:62:
                    f2:45:67:77:87:37:22:89:70:b3:3a:b6:14:07:a7:
                    19:c1:2d:9e:c4:e2:d9:db:41:d0:03:98:35:64:45:
                    f6:59:b4:8f:71:fb:03:dc:34:2a:7a:78:54:e3:1e:
                    97:fe:20:5c:89:23:c9:61:e1:70:fa:a6:bf:0f:0b:
                    11:c9:41:1f:e3:7d:65:78:56:ee:49:0d:bc:b8:ea:
                    c5:6f:5d:3d:ce:44:fc:b0:ec:98:87:30:23:29:eb:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:57:16:0C:A8:9A:E9:01:23:69:D3:AE:B5:E3:0D:2E:20:C3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:85:0d:4a:ea:f2:15:98:bf:0c:30:a9:18:09:73:af:56:a8:
         23:6d:65:e5:19:d8:f5:d9:76:38:a7:32:f7:ca:05:65:07:82:
         c5:55:13:11:9a:94:49:f3:f9:4f:73:b3:12:82:e6:8d:d0:17:
         c4:45:44:71:99:e2:a9:5d:c7:38:f3:13:23:10:e7:04:4d:6c:
         c9:57:df:5b:b8:9f:36:fc:0b:be:a8:4a:89:bc:48:15:0f:3d:
         d6:d7:3b:04:ce:72:9f:6f:0b:1c:58:7b:41:2a:0c:f3:55:42:
         c3:97:99:a7:ab:77:e6:11:cc:00:5c:48:fc:74:89:31:d4:d7:
         46:2c:4b:e0:fa:b7:6f:b0:03:6f:f0:7c:6d:a5:7a:c9:e5:62:
         cd:e4:d5:f3:35:60:9b:1c:99:36:8e:f7:62:10:b4:6d:ed:97:
         df:78:da:41:71:65:ef:ed:5c:dc:1b:1d:15:56:ce:10:4c:ba:
         aa:b2:c3:07:db:df:f2:82:e7:f0:df:49:9e:57:25:8d:0e:b2:
         83:e5:8a:7d:da:2e:24:6a:12:83:61:de:a7:bc:26:f6:83:d9:
         ec:5f:f1:9d:32:84:5d:2a:c6:f6:79:0f:13:ee:95:47:d4:aa:
         39:53:03:eb:c6:6a:48:c8:61:9e:f4:fb:66:b9:79:19:e7:55:
         46:6a:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:31 2024 by rpki-client on console-ams.rpki-client.org