Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa
File:                     5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa (raw, json)
Hash identifier:          QNeiLPND1Hwif7L3aCIW2PYJI2u4BdKsKq/2wGjAEw4=
Subject key identifier:   38:93:05:95:58:4C:04:CD:26:C2:7A:D3:BD:04:0E:CB:0D:75:3D:84
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584500F5693DA006D3EEFFCB3600
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        164.153.131.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:69:3d:a0:06:d3:ee:ff:cb:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=d98e1714-f51a-42ea-88e2-868eb9c78c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:c3:fc:78:88:b8:04:53:81:86:20:3b:bc:
                    6d:2b:e5:02:34:34:df:40:09:2e:53:9e:ca:eb:56:
                    6c:b9:aa:4c:86:e5:0b:a4:c7:1c:3c:f1:5e:73:f8:
                    42:04:86:cc:50:57:38:dc:ca:fd:74:6a:7e:6a:f4:
                    0f:16:ba:6d:1b:97:e1:b4:46:c2:af:53:dd:d7:8d:
                    5a:99:9d:ff:b3:bf:a7:63:28:85:ee:55:aa:53:26:
                    6e:c4:59:09:58:d3:87:c6:97:f6:fc:30:bd:0b:4d:
                    a1:6c:33:87:ed:83:e3:d4:b4:0a:8e:27:1c:79:1d:
                    85:42:4a:39:c4:91:bf:23:5d:db:76:35:c0:70:1d:
                    29:f1:82:e9:38:ef:53:7a:79:ab:e1:86:86:dd:2f:
                    34:85:de:e6:36:0e:3c:a5:d1:2e:2c:ff:4d:29:07:
                    66:6c:e2:88:0d:b6:b2:fc:61:68:d4:4e:ec:ca:04:
                    5b:d4:f7:8f:83:fc:ab:80:8c:2b:d9:e3:9f:58:e9:
                    74:7e:6e:7e:e8:db:0d:55:a8:4e:32:29:f9:d5:1c:
                    34:fa:19:65:f5:a9:05:14:20:37:ba:5f:c9:45:77:
                    de:b8:49:d3:89:bc:b0:6e:9a:b3:8b:67:3e:a6:35:
                    02:9c:2b:8a:35:f9:89:03:a4:99:85:4f:59:09:ee:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:05:95:58:4C:04:CD:26:C2:7A:D3:BD:04:0E:CB:0D:75:3D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:5e:e6:3d:38:6a:bd:6c:1a:08:d4:99:15:6f:4f:bf:6a:
         77:5d:8d:7e:1c:0a:5d:91:60:8b:8d:9f:f8:84:f3:79:08:4a:
         83:dd:d0:35:c3:73:b5:67:fc:ca:b6:e6:c8:7f:6c:ae:72:c7:
         67:fc:08:52:49:36:3a:79:0c:43:65:a2:82:8c:16:c1:55:1e:
         62:bb:db:d2:cd:27:8e:d1:9c:23:b5:07:ed:a2:34:4d:b0:e4:
         df:17:3e:a1:f9:78:db:6d:61:16:58:df:43:59:75:15:f0:88:
         90:fa:66:ce:ef:4f:46:27:ca:b8:b1:de:e9:5b:92:2b:ca:6d:
         4c:23:29:03:ce:1b:e6:27:8e:8a:84:26:ff:ab:1f:4d:b1:06:
         88:b3:7a:4d:79:9f:8a:5b:d6:64:be:bf:70:b6:e2:9a:29:6e:
         d5:05:2d:43:ac:1c:21:ce:d9:d2:a6:02:40:d1:3a:cf:a5:c5:
         9e:02:29:cc:23:d0:c3:a8:54:b3:ea:a5:cd:80:8b:d5:78:1b:
         d8:52:18:cb:73:4c:30:79:67:22:4e:f9:55:cb:7d:76:51:fa:
         cf:ed:ff:95:30:63:da:01:4c:44:d7:60:e2:02:b3:58:91:7c:
         de:a8:86:f4:c3:28:4c:4f:74:e3:40:b3:a8:f7:f9:ae:1e:03:
         db:87:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:06 2024 by rpki-client on console-ams.rpki-client.org