Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
File:                     1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa (raw, json)
Hash identifier:          q2/IzGpwdvbIkcRaJeptic9k54qvXnWOQJIfDyvuhJs=
Subject key identifier:   CE:A4:4E:CB:C0:47:38:2F:D6:B1:47:37:C4:75:F8:6D:1B:93:5B:CA
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285845A2C33FD2A3F6B62675B26000
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        162.255.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:3f:d2:a3:f6:b6:26:75:b2:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=01ac5d77-b8eb-40ee-bc09-7d70c801affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:86:2f:d8:8e:9b:1f:7a:b9:06:63:24:86:
                    bc:c2:a7:73:e0:44:68:12:b0:73:cc:88:3b:5d:b9:
                    1c:38:52:84:7a:8b:72:34:a2:d3:81:b0:6a:10:72:
                    ea:84:85:10:09:f7:a5:c0:a0:6f:2c:38:46:a2:66:
                    6d:b2:05:ff:f2:c7:d8:d3:88:c9:c4:6a:ae:15:38:
                    ae:1e:c3:35:b7:f2:61:f0:9f:67:3b:82:00:63:4f:
                    89:c9:e1:b0:f8:e4:ad:65:15:9f:83:fd:08:bb:16:
                    8a:36:88:db:bc:04:79:49:86:5d:94:60:70:90:57:
                    63:29:61:5f:d9:df:2a:22:45:18:f0:f8:19:60:a8:
                    c4:dd:a2:49:f0:a8:66:ac:fe:35:90:cf:6d:f5:0d:
                    1e:d8:13:65:4c:02:d0:df:60:4d:de:05:9b:5f:79:
                    21:a2:24:cd:71:ce:94:a5:74:70:24:a5:9c:4d:85:
                    57:44:97:84:25:9d:46:c1:dc:7a:05:00:54:27:8a:
                    4d:61:f5:77:b7:16:db:a8:d0:74:6f:73:bd:3c:dc:
                    1b:79:ad:a3:47:5b:f0:6b:3b:86:53:fc:7d:c9:02:
                    6b:d3:e3:41:49:7c:45:70:6c:9e:52:52:f2:1b:7f:
                    28:2a:a8:bf:0c:8f:5d:68:64:4c:57:03:eb:ee:93:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A4:4E:CB:C0:47:38:2F:D6:B1:47:37:C4:75:F8:6D:1B:93:5B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:f3:88:b4:0a:45:ac:7f:b0:84:3f:b9:ea:c8:d4:ec:49:
         b8:18:72:2e:88:a1:f6:0a:3b:32:61:32:be:66:64:3b:69:1d:
         27:15:d2:10:83:6d:a1:d5:6b:15:dd:dc:9e:a9:15:2c:0a:26:
         c2:9a:8d:8b:42:93:1c:d0:c2:c3:82:40:9f:12:bd:69:8f:f5:
         da:27:bc:2c:bd:e2:1a:06:24:08:28:52:77:53:3b:1d:b1:43:
         eb:4b:8c:06:77:83:19:cc:8c:0e:1d:1f:98:88:dc:4e:e3:5b:
         e8:35:17:44:e7:fe:44:1d:1f:6b:ac:d9:fd:03:e2:9e:e7:8e:
         77:35:2a:fe:ac:31:fe:76:ae:8e:02:4b:0f:2b:66:ae:a7:85:
         58:47:60:29:a2:f0:ca:21:21:93:51:7f:e5:55:31:09:35:28:
         83:70:d6:13:b0:f4:9a:3a:01:9d:dd:43:eb:72:5f:31:93:4a:
         02:b8:1f:87:99:a3:f7:d6:4b:0a:74:b2:54:fe:60:82:1d:ef:
         63:b4:44:1b:cf:38:2b:b1:4b:98:0d:c7:c9:27:45:d7:b8:45:
         31:d4:5f:c5:a4:a9:c4:7e:e3:76:cb:71:cf:29:9f:46:03:d7:
         dc:82:cf:96:a4:52:67:54:a4:d2:9f:3d:e3:bb:93:9a:45:75:
         e0:87:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:06:19 2024 by rpki-client on console-fra.rpki-client.org