Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
File:                     fd434724-7632-35bf-832e-50b74b1f77f7.roa (raw, json)
Hash identifier:          YjjnUd2fpetvm5T2oxRNG6cMPBnX0D0r20CCijqeiGA=
Subject key identifier:   75:5D:6F:D1:C2:11:A1:3B:CC:C7:E0:76:64:07:0E:0A:EE:A1:B9:FC
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285848394C8F2D60B2440257776056
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
Signing time:             Mon 16 Dec 2024 08:42:13 +0000
ROA not before:           Mon 16 Dec 2024 08:42:13 +0000
ROA not after:            Sun 16 Mar 2025 07:42:13 +0000
asID:                     54535
IP address blocks:        156.53.200.0/24 maxlen: 24
                          156.53.201.0/24 maxlen: 24
                          156.53.232.0/23 maxlen: 23
                          156.53.240.0/24 maxlen: 24
                          156.53.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:4c:8f:2d:60:b2:44:02:57:77:60:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 16 08:42:13 2024 GMT
            Not After : Mar 16 07:42:13 2025 GMT
        Subject: CN=857eae88-c953-4045-9804-59a97197bbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:7e:5e:5e:d7:ee:3e:bd:5a:9e:8e:79:c0:
                    58:30:73:21:a4:95:2b:e3:1d:47:02:71:61:ab:90:
                    10:84:26:eb:25:65:0c:6f:41:b3:cf:86:3d:99:e3:
                    5a:69:3b:33:c2:d9:7d:9a:15:83:c8:60:c7:e9:d3:
                    82:c4:a4:fc:dc:32:4e:98:39:c5:d7:3e:13:e0:fd:
                    4d:45:23:c4:d6:30:d3:bb:5d:93:4f:5c:3e:93:4f:
                    86:44:4e:33:ac:73:33:0f:64:4e:31:1a:73:da:82:
                    c2:d1:a1:6c:8d:8c:84:82:0b:b2:f6:9e:74:96:c7:
                    19:30:a4:c1:be:5c:eb:72:8c:e3:7f:a3:24:2b:b7:
                    fa:77:c2:ed:c7:95:d4:dd:eb:c4:7f:76:56:fb:51:
                    98:ca:be:dc:21:69:72:e2:04:1b:25:be:e1:74:9a:
                    3c:c0:d9:7b:8a:55:9d:ca:fc:0f:53:d1:f5:84:5c:
                    e8:ad:6b:af:66:0d:e2:8f:7c:f6:1a:73:fb:e8:c1:
                    ef:0d:ba:9a:e8:15:d8:1b:e0:69:cb:a4:e6:5e:1c:
                    19:1f:56:cc:cd:80:d6:51:0a:03:e9:71:e2:ce:4a:
                    c9:09:df:8c:03:b9:9b:a1:b5:75:6b:9f:21:cc:67:
                    42:cf:23:56:81:ed:81:e7:b8:1b:49:aa:cc:2f:d2:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:6F:D1:C2:11:A1:3B:CC:C7:E0:76:64:07:0E:0A:EE:A1:B9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.53.200.0/23
                  156.53.232.0/23
                  156.53.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:81:58:3f:80:92:9b:8f:b4:b4:94:48:aa:a1:28:8d:43:50:
         f1:39:64:a2:aa:57:db:29:57:d7:d4:28:e7:59:28:e4:9d:bf:
         84:ce:ce:7a:ba:c1:0c:74:f4:1c:48:ba:5a:60:c6:8a:aa:01:
         ef:a5:1e:ed:7d:cf:b8:1f:b6:7b:e1:dc:a3:cf:04:7e:35:3a:
         fe:1d:7e:07:a1:22:13:a8:34:e3:af:74:1b:c8:bc:df:27:84:
         78:d9:85:1b:e4:18:c0:4d:27:01:9b:68:da:2d:86:74:3a:72:
         5d:b1:5d:d4:f1:42:0b:24:d2:5c:ff:c3:c1:1f:68:b2:72:0f:
         07:3c:83:d5:a1:1d:17:2b:8b:7f:58:c0:17:6f:aa:f2:b7:0a:
         90:1d:e4:33:3f:56:d8:f7:70:ec:8f:d4:16:16:9f:4e:41:67:
         b6:e1:23:66:13:98:9c:55:3a:3a:b9:82:28:ea:7b:3e:6f:ad:
         62:5a:8c:20:a5:0c:01:64:76:16:99:98:34:62:fa:5f:6e:a0:
         0e:c5:c9:ea:81:b5:18:e3:91:f7:a9:4a:71:a8:c2:ff:9d:f3:
         69:5c:44:95:4a:ad:df:99:fc:5e:b1:c6:64:0a:bc:d2:8c:40:
         a7:a9:a0:69:ed:b8:f0:4b:df:b0:48:31:88:2a:09:a4:4e:69:
         7f:52:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 18:45:10 2024 by rpki-client on console-ams.rpki-client.org