Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa
File:                     b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa (raw, json)
Hash identifier:          zgRse44ash6LUPYe7RdgEn2r60T4EDb88coueFGycfk=
Subject key identifier:   B0:59:B7:29:F4:83:F1:26:D3:58:C6:CD:D5:15:F8:20:F3:2F:50:D5
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584789EBEF07C966643D6B309D80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     21859
IP address blocks:        157.185.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ef:07:c9:66:64:3d:6b:30:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=8018b0eb-cf48-4adb-851a-57f66f9fb249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:c1:6f:08:bc:ad:e6:5c:85:b5:e6:4d:43:
                    e0:0e:fe:b9:ff:fb:eb:60:de:7a:94:91:f9:45:6f:
                    2c:7f:1e:58:f9:c8:36:83:d7:79:6f:7d:3a:06:46:
                    60:dc:69:b7:66:3b:6a:99:26:72:bf:9a:39:7c:b8:
                    3f:cd:d8:27:07:a4:18:4a:c3:76:1c:10:10:f5:45:
                    e8:87:29:38:00:10:ed:19:b3:3d:f2:bd:d8:15:7f:
                    4c:23:a4:fe:18:d7:1b:fe:03:5a:6c:ab:79:ca:40:
                    9a:92:43:ed:10:f0:41:a4:6b:da:66:04:b4:e2:59:
                    4b:7b:3a:1d:9f:fb:7b:b4:ae:8b:3f:70:e5:89:5e:
                    e0:fc:23:f9:61:fb:f2:01:e6:8e:01:9e:49:1c:13:
                    b4:13:1d:3f:8c:5c:1e:92:66:78:65:5c:8a:1b:a5:
                    f9:ee:08:74:0e:ae:2b:dd:5b:68:be:f0:6a:35:f8:
                    f5:c0:60:fb:a4:58:27:1f:22:18:8c:de:60:09:60:
                    d9:ee:38:06:64:18:df:a8:2f:a8:a2:92:24:58:f3:
                    df:03:f1:8c:2e:fd:e9:4e:db:aa:8c:7f:7e:3c:ec:
                    11:89:fa:61:d2:84:4d:43:41:0d:a4:93:69:69:b7:
                    c4:d0:f2:9c:6d:43:23:05:8c:bd:c9:fb:8f:9f:07:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:59:B7:29:F4:83:F1:26:D3:58:C6:CD:D5:15:F8:20:F3:2F:50:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:16:57:63:a5:de:9d:66:b2:82:22:ae:97:74:33:40:51:d8:
         d0:90:bc:77:ee:e6:47:e7:fb:45:c6:7f:ea:64:ae:6f:47:28:
         d0:32:b0:64:b7:43:c5:45:e1:32:14:ec:9e:2c:d8:78:c8:da:
         51:3b:1d:37:1f:a7:ba:f5:40:8f:17:f7:35:26:07:39:4f:26:
         27:26:ec:02:17:c5:64:95:22:c1:5c:d5:6b:dd:48:6a:ee:93:
         8b:2c:1e:48:06:4c:63:9b:00:b7:19:ba:29:30:29:3a:c7:ac:
         4c:8d:de:5a:b0:e9:84:30:fc:cb:7a:c8:82:4e:11:20:cd:21:
         b5:52:aa:84:2f:78:52:5a:87:db:3c:6e:25:2c:a6:22:c3:af:
         86:51:6b:54:b0:05:fb:38:31:79:ba:4e:55:6d:40:64:a4:36:
         a3:10:ff:af:dc:fe:2a:72:b1:7b:bc:69:fa:6e:7d:18:28:d4:
         01:40:be:87:c6:75:1c:a2:bc:be:af:da:3c:07:fd:08:56:81:
         d9:57:e0:60:c9:6f:5d:60:96:bd:2f:7a:32:87:09:a5:fd:71:
         7b:10:e9:ee:02:45:56:60:58:9f:63:20:6a:90:05:33:ab:39:
         f0:b5:8e:1c:e7:18:7a:03:dd:a4:fb:88:cf:44:e3:02:61:43:
         18:37:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:36 2024 by rpki-client on console-fra.rpki-client.org