Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa
File:                     65b97efe-ed18-362d-843f-eac5d56e88c1.roa (raw, json)
Hash identifier:          bE4szA/NnOoO8Sz+yUw0VR1HbjaRxXvUGgcEmJ1lAA4=
Subject key identifier:   90:ED:AD:C9:A5:85:AB:2C:84:A0:DA:09:BE:6F:0D:94:55:C6:39:F9
Certificate issuer:       /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Certificate serial:       010D0C9F43285847299B19B69FA36501BB091880
Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     16509
IP address blocks:        147.160.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:19:b6:9f:a3:65:01:bb:09:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=0cd69a02-aa91-42e5-8c47-b3de137e07fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:66:97:0d:4e:f7:2f:8e:cf:0d:d9:f7:de:
                    d8:30:5c:3c:ff:8a:41:51:7e:57:ca:ce:33:59:50:
                    e2:06:d7:bd:66:e1:38:cb:7e:66:0b:f4:cc:a8:3a:
                    bc:76:89:a7:5c:86:9b:ac:4b:30:6b:95:27:72:fe:
                    be:1a:55:44:02:76:1a:83:cc:3e:ed:09:6a:2b:64:
                    44:c0:1b:df:7c:2e:f8:4c:2a:21:28:30:bf:e2:1a:
                    df:a7:13:08:5a:05:04:cd:0d:e7:3a:64:a8:ae:04:
                    9a:1b:e0:f3:c7:f6:35:6b:84:6d:d1:91:41:6b:89:
                    7f:25:9e:c4:2b:59:76:aa:34:33:7c:11:36:ba:f9:
                    3b:2a:0c:47:cd:13:e2:67:80:0d:5d:42:15:e2:0d:
                    3f:55:0f:98:d1:ed:26:c7:95:33:12:e5:10:36:02:
                    ac:54:f7:6d:78:4a:5f:d1:61:7d:36:5c:2e:08:b2:
                    49:e0:8f:19:67:1c:d8:e1:91:79:21:60:5d:37:23:
                    3a:95:24:7f:21:79:3c:d4:c4:39:13:3d:ee:d7:c8:
                    9b:10:3f:e0:4d:6c:74:1c:07:4c:e1:60:1e:81:79:
                    50:f1:89:42:dc:29:86:21:d1:45:17:b4:d6:6a:9d:
                    b2:ac:1a:88:48:da:b0:b4:d2:91:9a:56:eb:d8:89:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:AD:C9:A5:85:AB:2C:84:A0:DA:09:BE:6F:0D:94:55:C6:39:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl

            X509v3 Authority Key Identifier:
                keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:c4:b9:72:67:f7:b6:21:91:b7:b0:0b:41:95:43:bd:1d:
         bb:a9:d4:be:42:6c:7e:1d:76:c2:f8:ed:c2:59:e8:af:7d:6b:
         ed:50:b7:0f:f8:6d:74:8e:39:cb:bf:c4:f4:9f:78:ac:58:75:
         b6:be:03:cc:6c:b8:2f:f9:cf:c8:24:1c:c6:78:ec:1f:15:58:
         a6:f4:2b:cd:6b:cf:2f:51:46:22:83:19:c0:fb:73:9c:03:ef:
         13:24:4e:61:14:bd:3a:f0:66:59:54:e6:41:da:96:a7:b0:86:
         8e:a4:39:ba:47:5c:17:3a:08:d6:11:14:79:01:38:a5:07:68:
         9b:b6:bc:91:2e:d6:b3:4e:df:29:c1:92:01:b4:7e:f6:f5:30:
         30:5a:10:17:8d:81:50:6e:2a:b8:1d:6a:3d:de:56:15:9b:3b:
         47:76:4d:83:63:af:87:89:c8:9e:2d:61:ec:79:e0:09:9a:61:
         a9:4b:43:d2:df:52:cf:f4:7d:3a:9c:8f:46:d1:27:eb:2c:37:
         13:d8:15:6c:9b:55:36:11:a3:f8:26:d8:32:5b:cd:b1:e6:95:
         68:f1:b3:05:59:58:27:2c:e5:92:49:b3:26:b7:7b:25:2f:d1:
         28:35:fa:84:c4:41:68:6d:7c:27:3d:1a:26:1d:39:f7:dc:1c:
         75:1e:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:20 2024 by rpki-client on console-ams.rpki-client.org