Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa
File:                     439394be-f83d-3556-84dc-0573f83ade76.roa (raw, json)
Hash identifier:          tf1URJ+JO99qlQNMcnkZwMEFWVUOLxS/XQRYHCAZFdQ=
Subject key identifier:   9F:7D:89:DD:4C:F1:9E:7B:F9:50:B8:CF:E6:12:4B:3F:02:BF:24:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC0C6A6DCCE5260BB6D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        184.62.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c0:c6:a6:dc:ce:52:60:bb:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ccfb5c9b-769c-49a0-8046-a1e781776d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:e2:09:5e:26:be:49:10:ee:57:34:13:ad:
                    f9:72:06:43:23:89:29:f2:9e:70:88:b1:6d:b7:0b:
                    68:e1:97:9b:20:45:94:07:92:c9:28:b9:3e:a5:aa:
                    ee:4c:d1:ab:d5:bb:d0:d0:68:a6:76:17:4f:5b:46:
                    7e:dc:97:97:68:a9:8b:6a:46:fa:f5:27:50:b5:d4:
                    5b:64:b8:47:dd:6a:4f:b1:cb:cc:18:ff:85:d6:19:
                    a6:03:44:1c:5a:29:2e:e8:09:bc:51:aa:91:ae:ce:
                    db:95:38:83:d4:89:b1:cf:14:c6:84:ce:1b:d5:35:
                    8e:73:f6:d9:f7:24:ae:b0:9d:30:95:8f:aa:ac:c6:
                    e2:2c:81:56:97:5e:19:e5:38:86:69:75:30:73:a8:
                    cd:92:f6:4e:c0:8f:09:fd:e6:36:43:16:5f:09:6a:
                    da:45:9a:1a:6c:c8:72:6a:ff:ac:3d:77:c7:ab:48:
                    81:96:b5:d9:ce:62:a2:d2:e1:89:bc:1e:45:76:1c:
                    9b:55:e3:25:29:b8:84:b1:d7:22:2c:8c:7c:95:a1:
                    c4:fe:12:bc:d0:90:4d:17:0e:dc:e3:17:20:e6:6d:
                    42:99:75:99:0a:1d:5e:75:06:03:77:2e:0c:d8:03:
                    3c:b2:12:ea:14:d8:e9:ec:03:53:f5:06:e6:28:8f:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7D:89:DD:4C:F1:9E:7B:F9:50:B8:CF:E6:12:4B:3F:02:BF:24:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:5d:4d:ec:c3:96:5d:a5:51:cd:9b:f8:0d:fc:f1:6c:be:
         43:b7:cc:b4:a1:40:bf:ec:3a:16:c2:05:7c:52:78:b7:a3:60:
         59:1f:1a:fa:2b:42:c4:b5:4e:a6:d2:1f:7e:d5:ad:39:26:fd:
         4a:29:f0:17:54:8f:37:d6:14:ad:bc:7e:9e:73:e1:b8:60:7c:
         54:ce:87:04:a0:08:59:c0:d6:ac:1f:15:92:74:6f:84:45:1d:
         6c:8c:76:d6:73:d0:88:e8:4c:66:4a:93:9f:4c:47:52:ba:62:
         72:49:91:a7:f1:80:5c:e3:fa:90:69:fb:5f:c1:44:83:6c:5f:
         26:95:3f:20:ac:2f:56:91:b4:b4:90:6c:dd:cf:c6:f7:f4:c6:
         70:7e:d9:38:2d:dd:c2:be:9d:b2:76:b0:ac:cd:7b:7d:b7:bf:
         a6:16:2e:78:54:9d:aa:7e:a0:f4:dc:5b:29:25:b1:cd:4d:c1:
         fa:c4:c4:31:90:83:e0:04:fd:c8:77:7c:30:e6:51:64:71:ad:
         29:4d:76:cc:8f:8d:2a:ef:49:67:54:c2:5e:e5:af:33:05:3c:
         da:5b:8e:ce:70:68:96:8e:ab:b6:13:4e:7b:8e:17:08:44:51:
         a2:d6:c1:bf:8d:97:80:08:ea:d6:2e:e3:90:a8:1e:d9:e5:30:
         b1:ba:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:25 2024 by rpki-client on console-fra.rpki-client.org