Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa
File:                     faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa (raw, json)
Hash identifier:          oJFMPxhbq+AX7efogdqDffCh2Iu6wIzrelFfHYtuci4=
Subject key identifier:   D9:6C:A3:42:5D:9C:17:0B:E9:11:65:6C:0F:8A:EA:19:C6:23:90:BF
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845CE1BBC544E21D38BA005A12A
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa
Signing time:             Wed 08 May 2024 13:38:29 +0000
ROA not before:           Wed 08 May 2024 13:38:29 +0000
ROA not after:            Tue 06 Aug 2024 13:38:29 +0000
asID:                     11232
IP address blocks:        24.124.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:1b:bc:54:4e:21:d3:8b:a0:05:a1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  8 13:38:29 2024 GMT
            Not After : Aug  6 13:38:29 2024 GMT
        Subject: CN=29b1555d-4648-4596-ab2c-6b3337077245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:86:da:fd:be:39:00:91:45:f8:af:c0:a8:
                    ca:8a:a4:02:a6:5c:5f:42:52:c1:76:a8:41:e0:89:
                    5a:a5:cf:3f:61:e7:b0:03:c8:73:39:43:3f:12:d4:
                    25:09:e4:e5:9a:62:10:86:d7:5f:ed:ce:ff:ba:d7:
                    15:10:cb:2e:c3:a8:e8:7f:c6:a9:4a:57:d9:82:a2:
                    1b:18:f0:7a:1f:bf:58:ff:a3:49:71:52:14:f4:d8:
                    c4:74:43:4f:0a:d0:f1:f7:9e:9b:f5:1d:94:62:c3:
                    4b:49:e5:ca:4a:d0:1c:5c:7c:af:fb:b2:c6:35:43:
                    a0:d3:e6:d4:7f:4d:2e:34:b7:32:72:d9:1e:16:fc:
                    4e:fe:9e:4d:7a:9c:f8:a0:4c:2c:37:0b:52:6d:f5:
                    13:9c:b5:00:8b:67:e6:e5:2c:2c:b2:97:9c:07:6e:
                    f3:fd:8e:68:31:a8:aa:b9:03:f0:0c:04:f7:90:89:
                    ad:01:b3:e7:ed:98:f5:2e:95:52:41:b1:07:40:e4:
                    76:d2:9a:9c:e7:e4:9e:ac:40:55:22:4c:c3:0c:1c:
                    4c:49:8d:4b:8f:5f:a5:fc:be:4f:2d:b4:73:ea:aa:
                    d8:b8:77:80:33:c3:a2:4b:71:4b:5a:c2:dd:e6:ad:
                    79:ab:0a:e3:6e:ab:df:67:86:73:b6:fb:27:a4:61:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6C:A3:42:5D:9C:17:0B:E9:11:65:6C:0F:8A:EA:19:C6:23:90:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:b9:31:c5:2a:20:a6:3a:02:20:e5:12:14:fb:57:3c:ac:
         dc:ff:cd:44:7d:d9:0f:21:81:de:90:e8:23:ab:ea:e3:de:86:
         56:a0:cb:ef:9d:b2:77:d1:8b:63:8f:2d:87:ec:9e:e4:7b:67:
         54:6f:86:5c:03:12:80:2f:50:1d:8c:96:ea:27:db:90:28:ce:
         29:9e:97:72:ce:d6:03:5c:d4:85:e5:d3:6a:ea:40:65:c5:fe:
         c0:11:8a:ee:05:f9:ca:8e:99:74:5c:99:5e:9b:7f:3c:b1:b1:
         85:38:db:7f:a4:52:54:ab:93:86:1b:89:19:36:52:80:a4:b0:
         02:e9:60:22:f0:0e:22:96:bd:2d:75:63:03:9b:9b:14:49:c4:
         f8:3d:d4:85:5e:21:ee:c0:22:3b:d7:5d:61:75:40:84:d6:f9:
         2a:ed:a3:54:cb:a3:4e:2a:d8:a6:a5:23:08:80:9a:10:27:d0:
         63:5d:04:49:bb:37:94:26:4d:c0:ac:65:f4:c2:7a:8f:05:cb:
         e3:a1:2b:4d:2b:03:84:a2:fc:74:6e:7d:ad:86:0f:94:03:3c:
         22:4c:54:e9:29:1e:d3:90:bc:df:dd:b9:bd:86:5c:ce:b2:42:
         33:84:d0:60:80:e8:94:33:95:9d:fe:bc:f9:d8:9e:b8:4d:17:
         f9:86:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:07:25 2024 by rpki-client on console-ams.rpki-client.org