Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0dbadce-31b6-3bc6-abeb-7bc2d02f74be.roa
File:                     f0dbadce-31b6-3bc6-abeb-7bc2d02f74be.roa (raw, json)
Hash identifier:          ZMSVFQ2A5YLxUeKTchnep8BMbfRpl39HrdHlQLhCnRs=
Subject key identifier:   15:D4:A5:7A:8A:91:24:47:E4:AA:90:C9:0A:11:6C:12:9E:3F:D4:1C
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858457FDDD16FCEEB03AEE6E15CC0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0dbadce-31b6-3bc6-abeb-7bc2d02f74be.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        170.176.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d1:6f:ce:eb:03:ae:e6:e1:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=e2d137cd-b432-4e91-b9ae-a42a06858844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:0b:0b:4f:0a:30:a7:03:e0:3a:2e:c9:da:
                    73:a9:ff:04:13:dc:a0:4d:00:75:80:ec:6a:56:4c:
                    0d:99:e4:4d:50:df:7d:18:4a:cf:46:33:5e:f2:a7:
                    e1:06:cf:d3:57:07:b9:f3:43:63:65:51:92:cc:eb:
                    b5:e8:3f:ca:35:67:a5:8b:58:1f:91:88:e0:43:bf:
                    3b:29:8b:19:41:48:05:c0:90:cb:0c:71:b7:87:a9:
                    51:c6:60:22:c6:d0:43:31:9b:ec:08:69:22:ba:d8:
                    1f:cf:b2:45:e6:88:4d:96:49:52:3f:12:5f:3b:97:
                    5a:83:55:b1:f7:cd:8a:1f:99:ee:60:ad:d0:c6:5a:
                    80:b4:12:1f:e1:2a:da:65:da:d6:45:bc:9b:a9:84:
                    ef:36:76:37:05:10:0b:29:e2:57:cb:3d:a4:5f:d8:
                    c9:d7:bb:e5:4a:47:ef:f8:9c:3b:16:f2:aa:79:6d:
                    81:28:5a:85:bd:48:c5:da:c9:f5:53:b6:ed:10:b6:
                    f8:33:58:a4:00:83:91:0d:3a:29:3e:fa:5a:37:60:
                    a6:85:0d:43:d1:05:9c:75:a6:45:1e:59:de:b2:2c:
                    27:ca:fe:5c:77:4a:34:75:51:8a:84:76:46:e2:7f:
                    22:bb:4c:fa:73:d7:c2:cf:27:55:1e:ca:05:c0:4e:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D4:A5:7A:8A:91:24:47:E4:AA:90:C9:0A:11:6C:12:9E:3F:D4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0dbadce-31b6-3bc6-abeb-7bc2d02f74be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:65:0a:d0:e1:de:c6:d4:39:1e:7a:32:93:8b:48:02:3a:
         1e:f4:6d:7f:47:83:3d:c1:47:cf:76:df:cf:61:36:c2:ad:24:
         ca:75:98:fa:6c:8f:ea:5c:96:24:e9:cc:1a:a4:87:86:ac:71:
         78:c4:63:c4:a4:1d:18:d8:f2:e2:9e:77:e8:60:0e:56:84:26:
         7e:23:b0:bd:02:19:f3:1b:d9:89:f1:c0:32:b8:26:e7:80:83:
         ef:99:38:6c:73:bb:3a:74:a3:a1:76:bf:4c:82:3e:8d:14:ca:
         62:17:89:51:87:05:5f:ff:2a:5e:1d:82:88:d5:0d:9e:8f:bb:
         8d:c3:70:f1:df:83:09:4e:bd:0b:27:65:11:14:28:47:fe:49:
         de:22:30:55:f5:1a:e1:e0:16:26:5a:fa:78:8b:ba:17:3c:d3:
         64:ca:b5:aa:7d:0b:c9:54:32:ac:23:be:c8:b1:49:8c:5d:9b:
         f6:a8:7b:2e:36:6b:25:4e:c1:fe:cf:c0:b8:47:fa:3c:bb:cf:
         3e:b9:83:07:04:d7:c1:55:24:44:57:4e:00:6a:d1:51:26:c0:
         e1:e6:76:86:5c:a8:73:4c:87:79:5b:68:24:c0:cc:83:f8:90:
         07:5a:b9:af:cc:02:17:c8:67:12:81:57:9a:0a:a2:27:19:40:
         34:13:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:44 2024 by rpki-client on console-fra.rpki-client.org