Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa
File:                     13d5bdd4-b962-339b-84d1-b165fb00a082.roa (raw, json)
Hash identifier:          DpurEAxXLBi9/WrTzE9XtPwSjxIf86yoYdRPGNcnR8U=
Subject key identifier:   8F:5B:D0:E0:90:77:65:5F:95:1B:E1:E2:82:07:73:9B:D5:EC:27:FD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285847C1DF4F7D57DB79BE7A840C00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     14618
IP address blocks:        136.226.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:4f:7d:57:db:79:be:7a:84:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=db692420-086c-4a78-995b-1bed8a69b432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:1c:2e:95:c9:a9:2c:20:59:fc:d4:8c:19:
                    df:a0:b7:36:ff:c7:3c:d0:76:60:c9:5d:7e:37:86:
                    de:f6:e2:c5:49:e3:3b:49:51:a0:92:b0:86:4a:73:
                    ed:72:62:9b:ca:9a:77:85:63:b1:17:39:3a:e4:d4:
                    07:80:5a:ec:18:62:cb:f4:7a:c7:b0:a0:b6:13:18:
                    02:0e:5f:9e:3d:cf:da:ff:83:d6:78:4c:c3:cf:dc:
                    89:33:f0:32:b2:f7:c5:e2:7a:58:33:1d:70:b2:3c:
                    c4:27:3c:8f:ff:73:43:6c:59:3f:08:24:44:5e:79:
                    61:7b:e7:f0:b5:fb:a7:5b:ce:cb:5f:41:f2:e5:d9:
                    52:d8:6e:4b:b0:bf:be:fb:1f:8c:1c:d4:97:f9:5c:
                    17:b9:d2:15:ba:70:e6:22:5d:1b:15:9e:3b:49:f9:
                    7c:45:45:ea:9f:d1:ee:a1:42:e0:37:f2:31:0b:73:
                    1b:5d:7a:4d:39:94:e8:1a:9b:dc:e1:1e:c9:18:45:
                    20:2f:7a:48:a3:d4:b8:4f:b9:cb:2a:2b:ad:de:5a:
                    81:44:29:23:63:02:f6:c4:7b:1c:fc:70:46:96:fe:
                    d8:4c:28:2e:8f:a2:16:4c:e6:e0:71:5a:90:7e:ab:
                    7f:03:23:5f:93:02:1d:4d:2a:44:dc:c3:63:7d:27:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:D0:E0:90:77:65:5F:95:1B:E1:E2:82:07:73:9B:D5:EC:27:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:26:8d:b9:30:e9:51:74:99:07:83:12:31:fa:10:7c:04:
         68:20:3d:59:85:b2:08:34:ec:c0:c3:e4:1b:78:b1:81:d0:01:
         73:fe:73:ce:c9:05:d9:56:06:e9:72:d5:88:45:82:72:30:45:
         ee:73:3c:cc:7d:b3:17:27:ed:23:04:c5:e1:30:88:92:10:ac:
         96:31:04:a6:3a:9d:12:58:8a:1d:d0:77:00:a1:e4:5b:be:d5:
         a9:c7:3f:52:a9:d6:05:41:46:02:af:4d:1e:ee:d8:a0:57:7b:
         89:61:65:d4:5c:35:73:44:a3:4e:52:35:a8:ac:12:32:78:51:
         3f:c0:ab:c0:e4:7e:cd:d2:d7:60:75:8c:2c:d0:cf:ef:bc:d8:
         b6:61:f2:1a:76:5f:ab:74:ec:b5:3a:37:1b:c0:93:44:7d:0f:
         c8:79:31:7a:57:dc:18:9e:97:37:71:5f:d4:8f:25:d8:bc:15:
         c9:aa:78:55:56:0d:c4:d9:4b:54:0f:88:82:b1:c2:d5:b9:d0:
         a7:f3:89:e2:29:bf:0a:4a:c7:37:e7:8a:c8:bc:3a:8b:32:64:
         b9:a6:73:08:53:f5:a5:b4:a4:76:1e:f7:4b:f0:c3:4d:0d:80:
         fe:ec:85:fc:04:43:e4:70:fa:fd:03:19:90:0a:8e:a9:8f:3f:
         17:ac:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:31 2024 by rpki-client on console-fra.rpki-client.org