Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
File:                     7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa (raw, json)
Hash identifier:          mJ/gNrND5Kg+AHppXLngC052xxR7h9gbj4Fz5dD/vCw=
Subject key identifier:   5F:06:C2:C9:7A:B7:8F:74:22:FE:0A:63:DB:15:85:08:B2:9A:92:52
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858474C80BAABE40564141184AE00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     14061
IP address blocks:        152.42.128.0/17 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:ba:ab:e4:05:64:14:11:84:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=d65b7dd5-ba94-462f-b47a-45312bccb8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1a:52:70:c8:7f:67:a2:ee:34:38:e2:2e:65:
                    ce:98:a5:b5:7f:af:72:95:c2:f2:87:45:19:e3:d1:
                    92:92:0f:56:59:93:9c:99:fe:db:2d:6f:d6:86:3a:
                    2d:24:77:37:c0:61:0a:a6:ff:57:b1:02:17:3a:f4:
                    80:67:80:54:cb:bd:48:69:a9:e3:2c:08:e1:3b:ae:
                    1b:68:22:fb:55:0c:56:a6:20:3e:9d:6a:6d:7b:f8:
                    2a:72:39:85:77:3a:e9:ce:d2:59:90:08:f9:56:e4:
                    07:96:7f:5a:96:90:be:3c:2a:07:52:c5:a5:d8:be:
                    d4:d5:04:18:1e:8b:ea:a5:69:94:72:05:6d:33:64:
                    58:a1:a8:cd:63:5a:83:9e:a0:19:d7:64:db:11:12:
                    e0:b4:db:cb:82:89:26:16:dd:b9:fe:5e:88:dc:04:
                    97:50:74:41:33:31:ba:3f:47:c2:2c:19:9e:85:a3:
                    f7:9b:e6:85:7b:90:cf:f4:de:fc:b4:80:60:ae:17:
                    12:26:16:0a:a3:3a:f9:20:68:f6:10:3e:ab:be:43:
                    ad:ed:42:6b:79:dc:25:0d:e8:bd:ef:46:c0:32:b2:
                    50:c3:68:95:7d:cc:80:0c:db:a1:31:f9:69:bb:c7:
                    30:2d:48:e8:8f:51:05:68:d5:dd:22:2a:f3:24:38:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:C2:C9:7A:B7:8F:74:22:FE:0A:63:DB:15:85:08:B2:9A:92:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.42.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:63:6e:55:79:66:15:1a:2b:7f:8d:80:08:ca:87:c0:da:
         77:d8:c3:ac:11:71:a5:88:05:9c:9e:21:b5:80:b2:fb:8f:4c:
         ea:51:61:0a:fa:e4:9a:20:3d:e9:d5:ea:17:ea:83:db:55:89:
         06:19:cf:49:27:4c:de:43:76:63:07:9e:7b:ba:f9:30:3f:c1:
         a4:30:6c:cf:a0:cd:53:dc:e1:c8:b4:be:26:31:f0:ec:55:e5:
         2b:78:46:f9:6a:de:f8:f9:5c:14:c6:af:77:50:f5:ce:5f:52:
         37:b1:fc:48:bc:c5:0b:61:2c:7b:46:9d:d0:cc:de:1e:c7:9e:
         d2:e7:90:24:83:fe:3c:16:6b:74:8b:56:bf:59:1f:d3:05:6e:
         cf:f7:3f:d9:1c:0b:b9:19:bb:91:9a:91:66:5c:29:70:d7:05:
         33:48:d0:2b:45:b6:f7:e3:86:a4:3b:d9:26:03:49:da:a6:26:
         d2:d0:70:14:8c:c8:59:c2:f3:e8:d7:8b:c1:ee:1e:dd:cb:fc:
         52:03:97:79:8d:0f:70:a4:38:e6:90:4c:71:63:c7:c9:20:95:
         79:21:2a:ff:62:c8:9c:93:b8:db:b7:28:3b:4a:f3:ed:97:cf:
         c5:6b:b7:f5:15:eb:1c:a9:2f:cf:d7:f3:a9:92:f3:85:29:9b:
         21:0d:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:59 2024 by rpki-client on console-fra.rpki-client.org