Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/0c97c6cf-51c7-3605-964d-05e98b5766be.roa
File:                     0c97c6cf-51c7-3605-964d-05e98b5766be.roa (raw, json)
Hash identifier:          znWT8IrcM+Tp0Gnuwel6fco0W81NcC7XJjjyiJXYyms=
Subject key identifier:   4D:56:FC:D3:E0:8B:DB:01:C6:D8:D8:E3:E4:0F:1C:23:77:D0:71:EF
Certificate issuer:       /CN=da61168f-5649-4fda-acc2-e65f377d2592
Certificate serial:       010D0C9F43285847299B1AC51A85F23803476700
Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/0c97c6cf-51c7-3605-964d-05e98b5766be.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        155.46.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1a:c5:1a:85:f2:38:03:47:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=62ca1677-fd39-4127-a23d-c4d1c76b78ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:90:73:75:6e:28:fc:61:05:7f:5e:8d:cb:
                    0e:a7:f1:e0:35:18:cb:95:e2:19:36:24:57:3b:6d:
                    20:cb:48:10:44:b0:e6:85:30:50:e6:d5:57:c3:25:
                    2e:d4:23:56:80:7d:b5:d8:7f:d7:b6:56:82:ed:e0:
                    90:48:68:da:f6:61:91:8c:6d:84:30:3f:df:00:f1:
                    89:07:20:32:02:ed:39:8c:31:7a:ef:9f:f2:e5:bd:
                    98:7e:01:66:d3:5a:c5:96:ad:90:6d:89:c9:d8:ee:
                    1a:4a:81:fc:a8:06:66:c9:cb:75:fd:ae:20:26:4e:
                    9a:87:4f:a5:fe:82:c6:1b:e4:79:f5:48:e2:aa:68:
                    16:93:d3:ca:3e:78:94:14:19:f6:c3:b8:37:9e:68:
                    6c:75:45:d6:5d:f2:04:5e:3f:eb:ca:2d:df:4c:ed:
                    8b:c9:bf:fe:08:f0:3c:4b:f9:e1:46:97:02:0e:6f:
                    76:5e:f3:39:b6:3c:c6:56:c7:33:2a:77:55:f9:00:
                    5a:15:79:c6:05:42:bf:f8:e6:55:55:17:eb:9a:dd:
                    fd:8c:8a:37:bd:a0:6b:7a:6c:92:66:e4:ae:d1:f4:
                    e9:92:b5:48:62:31:56:ab:5e:5a:f0:0e:8a:5b:c1:
                    af:2d:a2:21:c4:a0:16:8d:e8:00:cf:33:16:3f:76:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:FC:D3:E0:8B:DB:01:C6:D8:D8:E3:E4:0F:1C:23:77:D0:71:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/0c97c6cf-51c7-3605-964d-05e98b5766be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl

            X509v3 Authority Key Identifier:
                keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:ab:17:b6:2b:23:e6:cb:a4:76:b3:38:99:1f:74:35:04:
         8f:80:ca:66:59:56:45:68:4f:57:94:5c:97:bf:3c:26:d9:3e:
         09:a2:57:77:de:f2:20:a0:c7:92:f2:a7:ad:cf:19:a9:44:b7:
         47:d1:91:41:c7:a8:c9:66:5f:82:4d:3d:2b:c5:b3:f7:fe:59:
         e3:ff:67:9a:56:5c:5b:f4:99:86:30:32:dc:f9:6a:e0:b2:e8:
         f4:60:ec:b4:19:8d:5c:72:df:6b:9e:b3:91:94:d5:14:ce:a9:
         7f:f2:0d:92:91:0e:3a:a4:ea:48:30:ff:0f:b0:bc:88:0d:6a:
         22:df:e6:7f:54:eb:01:fe:b7:3a:43:eb:52:00:8d:0b:c8:fe:
         38:6c:0e:13:93:88:5c:35:4e:69:6d:04:d4:79:f0:ba:ba:fd:
         64:f1:2f:8a:e1:05:e4:d8:bc:85:ef:46:88:87:87:38:f4:56:
         aa:92:2e:7b:9c:9e:79:af:e5:bc:d3:f5:87:bb:f0:3a:2b:b5:
         ac:33:0b:42:8c:76:e7:c8:fc:01:1b:ae:9c:86:fd:90:6d:18:
         11:2f:ef:13:6b:1f:a2:75:a6:d7:12:b7:6d:d2:9a:86:9d:36:
         d3:bc:1c:d6:00:76:6e:55:75:23:24:3f:0f:48:27:03:4c:28:
         6b:ac:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org