Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa
File:                     278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa (raw, json)
Hash identifier:          rcF0gk0VCWyj52A2S1qsm4/ajJ9KRN/bT2SNze/doFg=
Subject key identifier:   72:41:D8:EC:ED:DA:A4:12:C7:45:7A:38:82:FC:AE:F3:F3:7D:C7:3E
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285848394C8F6990D4E65B0E9109A0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa
Signing time:             Mon 16 Dec 2024 08:42:13 +0000
ROA not before:           Mon 16 Dec 2024 08:42:13 +0000
ROA not after:            Sun 16 Mar 2025 07:42:13 +0000
asID:                     54535
IP address blocks:        146.197.27.0/24 maxlen: 24
                          146.197.79.0/24 maxlen: 24
                          146.197.83.0/24 maxlen: 24
                          146.197.120.0/22 maxlen: 22
                          146.197.122.0/24 maxlen: 24
                          146.197.123.0/24 maxlen: 24
                          146.197.242.0/24 maxlen: 24
                          146.197.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:4c:8f:69:90:d4:e6:5b:0e:91:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 16 08:42:13 2024 GMT
            Not After : Mar 16 07:42:13 2025 GMT
        Subject: CN=d6b8e979-34a7-4786-b3ad-6504f4b2ba14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8f:a0:e2:01:88:62:6d:db:b0:e5:c6:b5:ed:
                    4d:cd:5d:b7:7f:0c:5b:17:b8:c7:e6:5d:ff:e1:ff:
                    ec:03:6b:73:26:10:a7:a7:b7:01:55:5f:1e:d8:9a:
                    9d:fd:74:60:2a:ed:48:98:b8:4e:8b:f0:b4:6c:ce:
                    f7:10:10:c4:3a:42:50:18:ea:30:6a:87:fc:59:28:
                    e5:f8:f6:4f:96:80:79:39:68:e2:99:c5:75:69:0a:
                    d2:05:72:5c:a5:f9:24:bd:00:84:6e:4f:a8:d8:9c:
                    8d:c7:98:6c:57:88:2c:75:86:45:61:c5:4f:ef:24:
                    1f:af:e2:72:7d:ed:a8:31:2c:01:55:04:fc:e2:a7:
                    9a:99:6e:de:03:18:eb:d3:7a:97:8f:9a:c9:38:2b:
                    98:99:32:55:00:e4:73:6f:b8:af:cf:17:b2:3a:61:
                    b4:eb:f1:c7:92:9b:5b:0f:8e:68:fc:ea:4a:6b:f0:
                    91:a7:e1:df:b5:83:39:9c:37:97:bd:99:f2:a0:e2:
                    e6:e2:77:25:6e:45:09:05:90:01:00:41:dc:16:e9:
                    b5:7b:a1:3b:14:9e:f2:d7:5c:7e:a1:4a:61:88:46:
                    09:aa:16:2a:71:cc:3f:ab:58:11:8a:50:fa:94:e8:
                    f1:14:d8:a6:42:1c:1f:b7:fd:db:a1:ee:a8:31:f7:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:41:D8:EC:ED:DA:A4:12:C7:45:7A:38:82:FC:AE:F3:F3:7D:C7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.27.0/24
                  146.197.79.0/24
                  146.197.83.0/24
                  146.197.120.0/22
                  146.197.242.0/24
                  146.197.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:85:a3:39:72:e0:0a:4b:31:8a:8f:66:8a:af:94:93:a4:
         49:56:f9:2a:f8:12:00:7b:74:65:e4:83:47:21:7a:59:45:00:
         ee:25:a8:85:73:ea:f6:0a:02:17:a6:cf:81:b1:ab:23:6b:be:
         6f:d1:f8:2e:46:8a:0a:f1:86:86:e0:51:a0:e8:8f:bf:15:5f:
         b7:5d:05:08:68:4c:14:00:61:a5:e6:13:83:65:89:3e:ad:19:
         7d:0b:4a:ba:89:cc:35:45:88:ce:a8:4e:10:58:ea:23:d8:4d:
         9e:31:45:49:46:7b:9c:94:cd:0c:66:0b:8c:e5:9d:c3:70:03:
         d5:4c:db:9c:fb:41:c9:8b:6e:4a:96:91:b4:41:9b:b4:eb:f7:
         f4:db:40:f7:08:4e:36:10:5d:6d:2b:ec:d9:39:34:8e:63:09:
         58:7f:04:d7:b3:e9:b3:f5:d7:45:68:6d:a0:d6:7c:06:fc:a2:
         36:54:45:ce:fa:0a:8e:f7:a4:bf:7c:d7:f3:22:bb:35:33:1f:
         dc:3b:d8:e7:4a:f5:3c:31:3d:f1:14:d8:fd:3e:e6:43:5e:5e:
         8b:9f:f7:17:f7:73:c6:1c:2e:94:d6:c4:bc:a1:1f:59:cb:a0:
         46:b6:a4:05:30:a0:a5:b3:68:08:44:45:11:a2:7c:c3:89:42:
         98:fb:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 17:54:48 2024 by rpki-client on console-fra.rpki-client.org