Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/2f8d5da2-8b84-3dad-b77e-58d386b39df6.roa
File:                     2f8d5da2-8b84-3dad-b77e-58d386b39df6.roa (raw, json)
Hash identifier:          Els0qbZSCI3jGlhS2CcfMzK0YOI0boBfBK6QuB8KwHk=
Subject key identifier:   E0:D4:95:E8:CF:CA:FA:50:D1:B6:B3:E3:BE:57:67:EC:75:8A:3E:A9
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F432858452AB7DD551AE28BED5E1EF228
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/2f8d5da2-8b84-3dad-b77e-58d386b39df6.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     812
IP address blocks:        24.114.64.0/20 maxlen: 24
                          24.114.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:dd:55:1a:e2:8b:ed:5e:1e:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=ca7d6fd0-7882-4b08-9863-8f36929f60d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:ac:72:54:dd:02:fa:66:bb:3a:72:6b:91:
                    cc:2e:4e:ea:cf:8c:ff:ef:45:6d:ab:6b:3d:b2:8a:
                    ee:cb:33:5c:95:b7:46:86:01:23:4f:3f:6a:2d:82:
                    c5:87:f9:32:d1:0e:20:5c:24:9d:97:56:88:f9:1e:
                    f7:ab:09:8d:3a:d0:d9:dc:46:da:69:7c:5f:a1:0d:
                    12:ec:ed:10:69:aa:57:a1:b2:8a:e7:00:93:95:13:
                    96:19:d4:a2:21:b6:00:c6:54:83:c7:cc:7c:93:cd:
                    ee:3c:c2:32:7f:63:e2:d3:24:f9:f3:94:3d:a0:04:
                    be:34:56:35:6b:d6:c9:cf:fe:00:e5:8e:3a:37:ad:
                    cf:84:8b:f1:7b:c0:98:42:dd:3e:64:5c:f9:09:d8:
                    d1:3e:71:20:fc:95:6a:5d:2e:1e:1e:72:f7:ba:03:
                    a8:07:30:e7:81:75:14:57:d4:79:68:b2:6d:41:6f:
                    a6:9e:53:6b:3d:61:70:c3:be:3d:1c:13:eb:dc:ef:
                    0c:e1:0a:87:0e:df:c5:29:a2:16:85:95:d5:22:4e:
                    f0:2f:07:26:66:2d:3c:9f:a2:55:46:c5:9a:e4:ee:
                    77:30:9d:6d:26:7f:73:e7:1e:05:c4:53:ef:42:ac:
                    60:c6:17:a7:83:8e:d0:c1:4a:45:dc:33:a4:e0:f8:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:95:E8:CF:CA:FA:50:D1:B6:B3:E3:BE:57:67:EC:75:8A:3E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/2f8d5da2-8b84-3dad-b77e-58d386b39df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.114.48.0-24.114.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:89:78:67:67:ea:5a:b2:dc:7d:56:5e:94:f4:9f:19:ff:8e:
         35:37:04:ab:18:1f:18:bd:91:31:f9:3d:f5:cf:56:89:ed:9e:
         4d:63:b2:00:42:e6:b8:f0:56:a4:aa:57:13:a9:84:d0:f3:9d:
         1e:93:69:97:c0:92:c6:36:68:fd:2a:63:86:10:ca:3f:8b:11:
         a1:b7:77:88:33:07:74:5c:2d:11:08:02:55:ba:17:37:00:7a:
         ef:12:0e:60:d4:11:52:36:32:ba:da:d5:33:74:0c:6e:8a:c6:
         8f:9d:5f:cb:59:1f:53:d5:40:0c:e1:7f:6c:3d:2d:00:76:45:
         ed:ee:8b:9a:f0:bc:30:90:75:fd:2a:39:61:ab:1a:5d:44:d1:
         7f:57:ab:de:3c:f4:c9:63:7f:d7:bb:3e:9e:92:14:51:e3:0e:
         4e:a3:09:c9:21:e7:93:61:12:e7:bf:f5:74:f6:00:ec:f3:23:
         66:81:34:95:1e:98:04:36:bb:32:92:34:b8:2e:ea:bd:7f:c0:
         cd:27:ab:11:a6:e2:6c:6c:71:bf:ba:0b:f8:63:4d:38:d5:2e:
         95:97:72:74:db:78:ce:5c:a0:55:9f:53:25:e6:41:10:31:71:
         98:5a:51:89:82:5f:0c:e8:30:eb:68:6f:d8:93:e6:c2:1f:44:
         23:b6:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:31:38 2024 by rpki-client on console-fra.rpki-client.org