Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa
File:                     c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa (raw, json)
Hash identifier:          0zab2+3P5eMIgDEBPs4xJA85ynvm5cOF4qZrDwdVH9o=
Subject key identifier:   E6:17:74:33:92:02:03:8F:C0:2C:38:CA:9E:9E:A0:D1:5D:C0:8D:CD
Certificate issuer:       /CN=51dcd612-9862-4e41-806c-9ada64fefdec
Certificate serial:       010D0C9F432858478E1BB97652E85C79A9CAA1C0
Authority key identifier: F8:87:F4:E9:1D:5D:2B:9A:88:B1:12:5F:7D:BC:9E:41:FC:40:19:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     398835
IP address blocks:        163.123.132.0/24 maxlen: 24
                          2602:fb3a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b9:76:52:e8:5c:79:a9:ca:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcd612-9862-4e41-806c-9ada64fefdec
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=9e926ca1-3a41-452b-b277-ad200a0b6ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:d7:6b:70:14:07:a3:b9:3c:0c:8b:d4:94:
                    19:c4:9b:67:c4:d9:7b:63:33:98:55:f1:86:bd:45:
                    92:5f:94:75:9f:6f:43:96:1f:cb:1e:f9:52:c9:bf:
                    53:33:1b:35:cb:2f:9c:bc:67:82:79:c7:9f:ee:c0:
                    18:5c:8e:56:32:d5:c5:79:7a:08:b0:d2:cd:dd:84:
                    27:c4:50:4b:2f:bd:6b:9f:8c:f5:e5:12:88:37:fc:
                    34:b6:28:f5:a9:71:e0:de:76:15:87:cb:74:72:4a:
                    98:15:bd:8d:d6:5c:b7:7c:c5:5d:77:79:fc:bd:85:
                    b4:0a:48:27:20:0c:6c:30:e8:80:0f:91:2e:2a:b9:
                    c6:a8:8e:04:e3:ce:cc:d8:e0:7b:e0:c8:2f:b3:3e:
                    19:9f:df:1b:66:4a:82:c9:ac:38:40:65:0d:3e:79:
                    a7:75:05:a0:5a:26:aa:0a:6e:c5:e5:59:ff:fe:39:
                    e3:3b:ec:ff:28:90:b3:5d:ee:7e:3c:ef:86:99:5f:
                    7c:8c:9b:27:1e:5b:02:26:1a:51:ae:8d:e9:1b:f0:
                    ab:7e:14:dc:9a:e3:e6:ca:20:29:37:4d:fd:64:db:
                    74:a2:a6:c9:cb:92:67:8b:7b:b5:c9:f8:83:dd:24:
                    3c:17:aa:ae:ba:7e:61:5e:09:fb:2a:33:1e:e4:3d:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:74:33:92:02:03:8F:C0:2C:38:CA:9E:9E:A0:D1:5D:C0:8D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.crl

            X509v3 Authority Key Identifier:
                keyid:F8:87:F4:E9:1D:5D:2B:9A:88:B1:12:5F:7D:BC:9E:41:FC:40:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.132.0/24
                IPv6:
                  2602:fb3a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:22:e5:27:7a:0f:b7:f7:49:49:17:de:89:e3:39:5e:36:02:
         92:97:74:1e:43:55:b2:5f:2d:6d:71:2c:f2:15:c8:f2:1c:62:
         ac:69:88:e0:69:3b:19:55:63:b2:d9:be:63:16:53:bc:c7:31:
         d5:88:1e:b6:a2:06:35:1d:0a:51:05:c2:1d:66:e4:8e:5b:69:
         1f:55:61:cc:7b:1b:8c:71:b8:8c:09:50:65:81:d9:4d:e4:16:
         96:a0:a1:1c:ca:bd:97:7d:5c:5c:07:bb:85:85:d0:42:32:af:
         fb:27:76:2c:52:01:99:13:e6:7b:6e:3f:c8:0b:dc:71:4c:af:
         5c:ae:7d:37:55:31:a1:19:95:0f:74:08:62:01:08:69:72:11:
         93:98:b1:5a:a0:93:3d:fc:21:dd:fb:ad:df:0f:21:9e:b4:73:
         d5:01:86:67:b9:b0:83:9a:26:ab:ae:27:e9:73:aa:7c:d6:1b:
         de:54:fb:81:00:85:16:3d:d2:b8:fe:8b:eb:d4:3b:e7:db:78:
         75:d4:61:8a:82:5c:ad:a4:f3:65:11:12:b9:be:bf:9d:7a:12:
         09:95:00:5e:52:51:35:54:6c:78:36:c4:e7:20:a3:08:48:bc:
         3e:78:aa:6f:bd:51:a1:e6:b5:fd:d8:1c:3a:4a:fc:ad:79:79:
         7d:8d:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:12 2024 by rpki-client on console-ams.rpki-client.org