Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa
File:                     d2fef010-6a3e-35e1-bd49-5221b39ef707.roa (raw, json)
Hash identifier:          ivgnEVOCZwXA08j0dYPa/jCd3IN4J/HvxE34Q0V1uKg=
Subject key identifier:   AF:7D:D2:D5:88:0B:78:E8:AB:51:8C:CF:56:4C:C5:C9:DA:05:10:D8
Certificate issuer:       /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Certificate serial:       010D0C9F4328584569885F4AFED6FE854342A500
Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        147.160.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:5f:4a:fe:d6:fe:85:43:42:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=9f41b229-9524-4f5e-9ae6-9c8e262a5eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:d5:45:7e:2f:85:04:55:73:9f:a7:81:04:
                    22:68:22:83:80:02:24:7f:d2:f6:b0:46:48:fc:36:
                    bc:69:e1:0a:4d:c9:5d:42:a0:34:ec:47:bd:32:5d:
                    92:4b:5e:2e:67:51:36:85:78:a0:b3:df:b2:51:ba:
                    33:95:f6:04:0f:36:0c:87:78:b1:08:3c:67:49:7e:
                    76:e3:d6:cb:5c:60:77:7d:d0:8b:ee:e5:28:b8:d1:
                    98:b3:8a:a4:43:ce:95:be:f2:b2:d8:b2:c2:c1:f7:
                    e4:ee:68:a4:46:bc:6e:3d:45:35:d3:17:f9:04:bf:
                    de:8f:b3:9d:bb:40:ab:59:9a:14:c6:45:55:16:f5:
                    38:7c:fe:20:98:1c:01:28:3d:10:19:76:18:1a:4d:
                    35:84:eb:05:12:44:22:02:3f:c1:51:ff:a8:11:ae:
                    40:d2:66:6b:3b:ad:6a:e5:8c:ed:96:d1:99:fd:0a:
                    f9:7b:72:55:02:85:fa:51:31:55:6b:0e:74:e8:04:
                    e2:14:52:d9:6f:60:11:11:9b:79:0b:04:05:78:01:
                    b7:2e:89:ee:d7:ef:62:1b:70:f7:76:41:36:a8:e0:
                    ae:11:56:af:fc:5d:44:7c:72:71:71:31:f9:de:1f:
                    9f:e9:8a:4c:dd:d8:5c:43:0c:46:96:a7:9a:2f:c3:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:D2:D5:88:0B:78:E8:AB:51:8C:CF:56:4C:C5:C9:DA:05:10:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl

            X509v3 Authority Key Identifier:
                keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:24:df:4c:58:cf:fa:b6:79:b0:b4:37:ad:65:b9:47:9c:
         11:90:d1:a3:cc:bc:4d:27:23:7b:26:89:52:44:3d:dd:b4:88:
         fd:9e:4d:dc:f5:de:8a:85:4d:cd:76:84:74:b7:b1:3e:d5:35:
         5a:82:78:07:74:71:78:2c:e2:2b:70:e6:3a:df:d7:2e:11:aa:
         ac:5f:11:ba:75:63:e7:8a:e0:90:bc:05:59:1f:01:71:2f:44:
         4a:1e:85:4a:76:9b:8c:e3:f3:11:b5:dc:09:c0:85:7f:50:50:
         36:a9:20:a2:97:af:14:92:ce:16:b6:0c:ab:02:c6:7b:19:c0:
         19:5a:47:ff:ec:4a:a6:89:14:17:07:67:cf:6e:44:ba:af:08:
         a5:0a:18:73:18:16:40:11:b7:e6:ce:ad:d6:a8:a1:48:31:4c:
         90:cf:2a:23:b2:ad:03:a9:dd:5f:b4:d9:a8:83:b2:d4:5f:20:
         04:b4:1a:dc:6d:af:23:57:be:ca:5b:3c:2f:2e:42:10:31:f1:
         77:66:41:03:53:65:10:6b:56:cc:69:5c:24:e8:77:de:5c:95:
         d3:31:bd:00:1d:df:48:33:e6:94:31:73:27:56:c3:79:d7:b9:
         db:86:d4:8b:0f:e5:af:01:6c:5b:05:0b:bd:6f:5b:b7:ec:8b:
         89:0d:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:18:01 2024 by rpki-client on console-ams.rpki-client.org