Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
File:                     e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json)
Hash identifier:          1R8guUo6sEGDCnsr90B/rPNhaxc1InTAzNZA6YScsiw=
Subject key identifier:   01:A7:FF:D1:6A:5C:17:6D:45:0E:C7:0B:2C:C2:EF:A5:7D:92:07:E2
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584765A0DF4C83FC71E9B51F7E00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14061
IP address blocks:        164.90.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:df:4c:83:fc:71:e9:b5:1f:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=857a900d-afb3-410f-98c6-1bcb99d53644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:1b:d5:b4:a6:1b:72:9a:f3:23:7a:46:71:
                    54:1e:07:0d:c9:57:61:30:2a:30:37:ae:97:d6:6b:
                    60:da:ec:9d:53:f2:f8:0b:9c:53:6a:ed:8e:96:b0:
                    f3:45:d3:3c:97:48:3e:10:fa:38:68:84:1e:78:19:
                    3e:5f:27:58:a4:31:8f:77:a1:01:b9:f5:c2:d2:79:
                    36:9a:d4:d3:e3:b9:68:3b:8f:99:96:7e:43:98:c3:
                    f0:98:05:1f:bc:fd:69:88:93:80:28:59:4e:59:14:
                    03:64:91:b1:e7:b3:60:39:c6:4c:d1:b7:6f:8d:55:
                    b8:ad:0c:4e:50:66:47:48:df:1e:4d:32:2c:88:cf:
                    44:d0:67:59:75:f8:6c:07:18:89:a5:8a:46:22:7d:
                    85:b0:e0:42:78:af:0a:50:be:b7:2d:8f:47:21:67:
                    2b:2b:15:76:8d:bc:3d:df:71:0f:f7:23:01:a3:56:
                    9e:35:58:ed:20:20:88:10:94:03:e7:14:75:59:42:
                    a8:5c:08:aa:88:54:53:38:63:f2:4f:af:ec:01:e4:
                    a4:84:49:42:c2:9e:51:7e:f9:fa:bd:aa:b4:56:1e:
                    15:50:8f:01:e5:2a:95:f8:66:8d:9d:12:1d:a6:e7:
                    0f:33:e5:b2:06:8a:1c:0f:c5:82:99:2f:cf:e6:c8:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A7:FF:D1:6A:5C:17:6D:45:0E:C7:0B:2C:C2:EF:A5:7D:92:07:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.90.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:be:e5:d2:84:d6:2d:f5:2c:8f:b9:3c:41:ba:b0:10:70:
         7a:14:cf:68:52:4f:23:1a:2a:7e:86:2b:b9:d1:ac:d6:00:b4:
         c3:94:20:5a:be:82:d7:07:17:00:9c:bc:e9:0f:9d:b9:91:ac:
         1e:b5:e3:cc:b2:43:a5:1b:f7:37:da:6a:23:78:11:b5:0c:f9:
         5d:83:8f:19:37:42:3e:8f:b9:5b:cf:1b:e2:50:6b:58:58:f4:
         da:ca:35:7d:39:49:56:ae:e0:38:3b:f1:ec:98:04:cf:bc:65:
         78:5d:82:70:42:27:50:7d:80:e5:74:39:d2:cd:01:6c:27:8f:
         3f:0b:6e:4a:4c:a1:cf:78:35:f1:80:62:0d:f0:e3:51:6c:1a:
         3d:d3:d3:d1:22:a2:e5:00:5b:dd:31:f9:c2:42:c6:4a:4a:df:
         2b:0f:e9:53:c4:d8:80:13:53:50:76:9c:79:09:fd:9c:5e:5d:
         bb:fe:91:5e:76:e6:82:bc:7c:f5:f8:93:3e:fa:3c:fe:b1:08:
         e5:8c:83:a5:af:8e:da:d5:c8:cd:33:24:6a:2e:ef:10:4d:57:
         ac:8b:d7:9b:13:8a:11:69:9c:8d:2c:85:3a:ce:14:fa:05:3e:
         61:84:b6:5c:0c:07:45:a7:a0:01:c3:60:d5:2f:0c:c2:ac:ff:
         50:2c:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:02 2024 by rpki-client on console-ams.rpki-client.org