Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
File:                     9ecee302-59db-3fe2-8434-966c474e0474.roa (raw, json)
Hash identifier:          n0oue2efMYDEetAIaPWtHx2sSAaB5x6a5LpzMTWwkGk=
Subject key identifier:   70:6B:30:C1:65:9F:47:B1:DB:1B:7C:05:DF:68:84:F6:5A:4D:C2:42
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285845BA7E3776399083DB0F8BB180
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        149.112.17.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:37:76:39:90:83:db:0f:8b:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=9f03e320-4599-4d20-91af-f973390c20fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:47:3e:b7:39:13:8b:c0:1f:ac:17:95:e0:
                    5c:c5:3a:d8:69:ee:db:ba:21:cf:2f:7a:9a:14:4e:
                    c6:57:59:35:a5:44:00:ee:12:99:23:d7:45:f2:ef:
                    e8:d2:02:62:bd:20:e3:1d:fd:f0:dd:88:f6:02:a0:
                    42:4c:31:3f:67:54:e1:71:b3:e7:58:e4:fe:db:dd:
                    80:86:9c:42:69:fe:29:a7:3a:2d:15:8e:8c:da:01:
                    6e:dd:ca:11:13:64:73:2d:33:dd:4e:a0:ab:62:f4:
                    94:27:6b:22:9e:97:4a:47:ec:95:3e:1b:7c:17:31:
                    0b:37:ad:62:c3:ec:5c:a2:5d:4f:87:20:49:f9:ce:
                    2c:c0:f8:46:07:89:6c:43:df:11:6b:73:6b:4e:90:
                    02:e5:06:15:05:32:25:c5:30:ab:c3:96:3e:56:2c:
                    c1:89:95:57:f8:8c:47:e3:6b:e8:0e:7e:9d:c2:b7:
                    9e:43:e6:d5:5f:a9:8a:70:68:65:6a:0b:3c:35:fa:
                    6b:b6:8f:13:f9:39:a9:a7:d1:56:cd:b2:b7:42:f0:
                    cf:ac:07:1b:b6:54:23:1c:f6:34:8e:8e:db:e2:54:
                    f3:e2:5f:8f:28:68:2a:8e:4c:c5:c7:50:4e:f0:db:
                    14:5b:a9:a3:14:be:4b:45:6f:55:20:17:12:1e:af:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:30:C1:65:9F:47:B1:DB:1B:7C:05:DF:68:84:F6:5A:4D:C2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:78:04:40:ff:7b:8a:02:e8:fe:ba:d3:b4:4b:df:b6:b4:2e:
         e2:12:0a:b3:0b:34:1c:60:e3:19:db:e0:ab:82:4e:9a:27:47:
         a3:b4:43:fe:1c:70:a8:f0:72:ab:57:fa:19:70:f5:85:d4:3f:
         1c:fb:50:d9:24:ce:cf:94:09:7c:17:87:72:11:f7:ad:54:bd:
         e0:74:4f:f2:73:05:34:80:f8:a6:bd:7f:ae:79:af:31:bc:2f:
         5e:c8:ce:a7:fd:73:b9:b4:8b:51:52:7d:98:49:2a:58:0d:11:
         7a:04:59:42:cf:e0:42:76:46:d7:54:ab:a3:90:fa:b9:d6:a8:
         ce:c9:fe:b8:e1:1a:9b:d7:12:0a:d5:53:7e:06:5d:bd:f5:0f:
         c3:48:57:a6:21:11:97:8d:15:f0:24:e6:cd:ad:a2:e4:82:90:
         bb:54:cf:17:63:7a:f2:21:4e:e1:e9:af:04:cf:59:18:45:84:
         0d:a0:c8:41:a7:5f:f5:f7:db:c2:e6:92:65:aa:9c:2e:7c:06:
         dc:a0:cb:21:bd:ef:54:d6:34:c2:a7:d9:64:4e:30:a8:d2:f2:
         16:aa:fc:ce:bc:d9:6b:01:74:86:95:9c:40:82:f5:33:23:e9:
         eb:3a:da:c1:71:40:63:f2:52:f6:e5:9f:ec:2c:37:39:84:d7:
         05:b0:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:15:59 2024 by rpki-client on console-ams.rpki-client.org