Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26ffc93d-40c1-3886-b48e-1952cfdc9337.roa
File:                     26ffc93d-40c1-3886-b48e-1952cfdc9337.roa (raw, json)
Hash identifier:          Z8RaLqANN9FOmHHaZzZhk/E22kQ8RfrH7eBKeoub6lA=
Subject key identifier:   40:79:CB:9D:05:63:3C:31:B8:94:AD:8B:8D:F5:B0:67:1B:DD:0E:E2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7615248F09627FAF0B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26ffc93d-40c1-3886-b48e-1952cfdc9337.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:76:15:24:8f:09:62:7f:af:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0ceb00a0-b6b9-4267-8935-f93207e1d9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:48:29:09:d5:46:e3:81:96:44:61:48:39:
                    6d:cb:c7:fa:07:30:17:9e:da:c0:80:f0:5e:89:fd:
                    93:ef:66:29:4d:49:d6:d1:8d:64:d7:28:35:5b:75:
                    7c:64:2f:95:17:2b:b9:1a:b1:88:70:74:74:30:71:
                    1a:07:9e:7e:62:8d:0a:66:85:11:bb:87:61:02:f7:
                    a2:fa:f7:52:22:4f:9f:f4:98:85:53:b2:90:33:8d:
                    8e:b3:18:f4:f5:7e:c4:1a:e7:74:5b:1f:47:ca:55:
                    e0:d1:87:78:af:03:c8:d6:d9:90:ea:7d:75:4d:88:
                    60:30:61:a8:17:30:8d:6b:42:a2:d7:18:fc:ca:56:
                    7f:52:f3:3a:e0:fc:df:8e:40:11:70:7a:0e:95:97:
                    ed:2d:ed:c3:79:c2:e7:df:73:5b:6a:9a:82:b0:fd:
                    d2:7b:33:8a:73:46:cb:1b:11:7e:84:47:99:ea:cc:
                    16:1c:31:26:12:41:be:ce:2d:83:52:35:0e:21:1a:
                    63:0a:09:34:fb:43:5f:bf:cf:a6:f5:9d:cf:16:d2:
                    fe:20:1f:08:46:33:46:67:5c:3e:9b:2b:aa:e1:23:
                    f3:d4:23:94:d8:8a:16:b0:45:3b:2d:cc:ea:cb:2a:
                    5e:49:cf:a7:d4:61:0d:89:4d:03:22:17:c4:26:17:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:CB:9D:05:63:3C:31:B8:94:AD:8B:8D:F5:B0:67:1B:DD:0E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26ffc93d-40c1-3886-b48e-1952cfdc9337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:76:f0:22:33:20:5b:b9:32:3a:9e:c9:98:77:89:2c:77:7b:
         05:62:2b:12:6c:f3:87:2e:8e:03:d1:4c:0e:00:31:02:7f:69:
         aa:4a:12:fb:9d:8b:be:56:dd:45:b1:6b:bf:2e:8e:21:2d:da:
         a5:c4:e6:09:21:dd:22:d8:0a:73:28:80:78:19:39:36:f1:44:
         dc:c1:be:9d:8e:82:c7:a7:53:63:b0:fd:47:ae:72:d1:e6:ba:
         5b:52:8b:7f:83:8f:9b:d1:cb:c7:0b:55:ea:07:dd:08:da:d9:
         31:2d:81:c5:92:0b:b7:94:c6:ba:c6:6d:bb:cd:40:ec:ee:8c:
         38:0b:45:4a:ac:0a:f3:af:3b:8a:b9:42:4f:9e:19:05:ca:31:
         eb:10:39:a7:66:aa:c2:16:2b:9e:c0:5d:6f:5a:4d:c7:7d:26:
         be:ad:11:0b:e1:b1:49:77:83:39:76:ce:9f:e8:7e:9d:6b:75:
         40:10:98:b9:5d:41:85:68:73:0b:63:be:ca:c7:f8:3c:6d:a7:
         81:ea:15:82:09:c9:72:e4:c4:76:91:f4:95:6f:4e:c6:ce:d6:
         7f:f2:3b:a9:09:5c:1c:41:33:76:69:c7:62:44:c8:52:27:3f:
         ff:f0:13:27:33:7c:15:be:4a:4f:52:e6:73:d6:4e:0d:64:36:
         d7:04:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:02:54 2024 by rpki-client on console-ams.rpki-client.org