Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa
File:                     452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json)
Hash identifier:          ScMFf3y2oZlmALD8cbcH/YXtsuSWW+o3gC8bBBoekyY=
Subject key identifier:   5E:FF:0E:BC:B9:41:95:7E:A6:A7:19:BC:67:7F:24:C2:40:4C:E1:59
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F432858458F387ACE12C6039A13F763F0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     24753
IP address blocks:        64.49.154.0/23 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7a:ce:12:c6:03:9a:13:f7:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=5fd84ca2-a72f-40c7-b8a5-20f0eb276acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:e3:88:5c:2b:d0:df:4e:76:b6:90:49:d7:
                    78:94:53:ee:1a:99:3f:82:74:7c:59:15:11:0c:fc:
                    d6:20:6b:08:5f:99:31:63:73:97:db:73:03:4d:8b:
                    40:9e:ca:f1:f3:8f:74:32:5a:ed:ad:cf:b8:59:0e:
                    a1:af:26:eb:ca:28:c8:66:76:96:f2:4c:b4:17:08:
                    f0:29:76:62:f3:18:bd:57:25:6b:45:d5:01:66:b9:
                    ae:9a:f2:b0:6b:3e:ed:f3:44:62:f7:73:04:a6:09:
                    f9:9d:06:ec:56:39:aa:7a:a7:0b:6d:eb:09:86:d6:
                    82:be:4a:a9:be:98:cc:eb:c1:5b:23:94:4f:8f:fd:
                    3d:83:3b:3c:ce:79:7b:02:65:57:18:10:da:0f:fb:
                    dc:c5:a9:b4:7c:93:31:75:0e:da:36:dc:58:45:47:
                    a9:cd:84:c5:6a:02:79:57:d4:6d:64:98:33:50:b2:
                    9f:86:df:27:f0:a7:9a:fd:a4:1a:ee:33:3f:dc:be:
                    7d:7e:fe:c5:bb:cc:f5:d6:c1:0e:21:2a:88:78:b3:
                    f9:bb:4e:1f:21:6d:33:d0:4a:96:40:53:ea:48:9a:
                    30:1b:a6:05:0d:d9:60:9f:67:cf:2f:de:12:cb:fc:
                    5e:39:4d:2c:89:42:c8:a4:81:43:ad:81:41:5c:fb:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FF:0E:BC:B9:41:95:7E:A6:A7:19:BC:67:7F:24:C2:40:4C:E1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:2f:e6:57:e8:7c:a4:ea:e7:e0:1e:37:0c:82:82:cb:bb:
         f1:9d:3e:f6:4d:58:a8:2c:d4:e8:3b:78:a3:3d:23:2e:5c:63:
         cc:ce:93:73:5a:ff:83:34:7b:8e:b5:2c:f9:e6:16:e0:af:81:
         b3:10:5a:c4:64:57:52:2b:0d:8b:af:7c:82:5f:87:16:a8:34:
         5a:31:37:22:63:f1:da:d7:f2:7d:42:6f:ae:31:e8:83:fb:97:
         60:65:5a:82:bb:c3:d7:2f:1a:1c:f7:fc:8d:b4:b3:ce:63:8b:
         5c:b4:14:03:b0:44:a1:8b:0b:3f:72:bd:96:d5:46:46:cf:ca:
         c5:9f:32:27:5c:55:d5:b5:dd:fc:6d:15:86:bb:0f:13:68:0d:
         23:bf:3a:e8:08:27:7e:ff:c4:ec:67:13:fa:6d:a0:b0:c9:57:
         89:04:53:ab:ea:39:a4:41:15:62:7c:f4:52:9b:45:2f:7e:08:
         e5:45:8f:1c:6d:e6:64:ab:01:b8:be:04:33:f5:9b:30:98:84:
         1e:cf:eb:63:e4:cf:0e:93:d1:ec:17:a1:4a:2c:5d:21:08:21:
         83:ce:a7:be:8e:03:a5:cb:e2:01:5d:e7:e3:c1:71:75:14:25:
         4f:9a:b6:e2:7d:df:04:c2:c0:d5:40:8d:fb:97:36:6d:3f:b2:
         8f:52:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:07 2024 by rpki-client on console-ams.rpki-client.org