Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa
File:                     b3010e93-e63c-308e-9e24-3cf99cb0963e.roa (raw, json)
Hash identifier:          XkdOBQGRP44Tm/ZyoQZWSkrLv1ZTSxXlpuk7lxlQX3I=
Subject key identifier:   E5:46:95:1C:05:B5:7B:B9:D9:8E:1D:C9:8F:16:50:BD:52:56:A2:30
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F43285847A9A73DDD7E4DB33A25714458
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa
Signing time:             Fri 25 Oct 2024 21:48:32 +0000
ROA not before:           Fri 25 Oct 2024 21:48:32 +0000
ROA not after:            Thu 23 Jan 2025 22:48:32 +0000
asID:                     2152
IP address blocks:        205.154.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a9:a7:3d:dd:7e:4d:b3:3a:25:71:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Oct 25 21:48:32 2024 GMT
            Not After : Jan 23 22:48:32 2025 GMT
        Subject: CN=1419e9af-325a-465e-970b-f26f73776b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:3b:3b:46:f3:38:db:b4:3b:a1:65:31:ba:
                    02:2d:9a:a2:c4:bc:b6:d8:1e:28:dd:a0:ca:ab:da:
                    ba:94:3a:5f:89:ce:f8:16:84:12:1c:11:e1:3f:bf:
                    67:d2:76:80:72:31:38:a3:80:ca:22:95:06:ee:72:
                    1e:a7:2f:d5:88:3f:b1:7d:b3:69:ca:29:33:51:44:
                    85:dd:09:9e:57:ce:f6:cf:86:39:7a:ab:ed:3b:c8:
                    a1:e4:e1:16:e6:bf:1b:fe:30:0d:2e:fa:74:a4:8b:
                    3d:6d:2e:75:ac:c8:a4:94:7d:74:71:23:9a:51:f6:
                    10:34:52:4d:90:bb:cf:d9:63:43:67:2e:4a:79:39:
                    cb:1c:54:a2:d5:25:55:84:08:0f:81:2d:5d:f1:92:
                    28:87:8c:76:a9:4f:87:17:ee:74:7c:a7:d6:ff:a2:
                    3f:0b:dc:c0:ae:fd:a8:c0:dc:9e:00:e5:7a:7c:2e:
                    26:e1:96:68:10:f1:ab:ff:a0:e2:85:48:6a:5e:ef:
                    c6:7e:d0:1b:58:3a:ba:19:6a:bf:5a:23:25:12:1c:
                    85:53:8e:fc:71:9a:37:44:8c:fa:f4:2c:13:09:97:
                    a4:d0:29:fe:ec:d8:58:6d:60:f0:d1:f3:aa:2c:fb:
                    8b:70:51:e1:b0:4f:cf:4c:a0:7f:8c:0e:b1:65:0e:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:95:1C:05:B5:7B:B9:D9:8E:1D:C9:8F:16:50:BD:52:56:A2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.154.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:2a:ca:ac:66:5d:fc:ee:2a:6f:b6:87:2e:3d:c4:cd:c2:
         dd:6b:3a:e7:5d:a6:43:e3:18:a8:9d:09:b3:07:fc:0a:27:7b:
         1a:0b:06:c5:e1:90:92:96:0d:25:78:96:f0:93:2e:60:8d:eb:
         b3:d2:21:c5:9d:57:2d:1b:bb:a1:48:f4:d5:11:20:4c:92:13:
         42:2c:02:48:2f:80:54:d6:95:c8:ff:cf:b0:8f:c4:3b:7c:d5:
         93:12:09:a8:a4:a7:4e:c2:68:d7:a4:0b:f6:6d:4d:6a:63:45:
         f5:16:38:37:b8:29:bf:64:0f:8e:b2:71:22:2d:27:e2:83:63:
         e0:87:ff:b8:b4:ce:9d:38:2a:15:5d:a9:0f:61:bb:4f:ce:cd:
         06:44:fb:8e:12:58:39:c7:c0:89:00:43:81:02:a2:f6:a0:ac:
         18:af:98:ed:8a:5c:1c:10:9c:96:41:b3:8b:aa:ba:6a:8f:7c:
         e8:7e:5f:0c:eb:73:20:5a:b3:24:7d:66:b1:f6:af:be:c3:9e:
         24:8a:b5:c4:2a:14:b1:bd:1e:30:cd:15:da:8a:d7:d5:a5:1e:
         bd:45:05:e7:da:d9:02:46:fa:ba:3d:f2:e4:49:be:33:08:ae:
         74:59:f0:c5:1c:47:dd:1d:ed:84:ac:c9:40:15:85:2f:80:44:
         11:3d:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org