Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66c9a6e0-0da8-3cdf-8d93-af2131e7914b.roa
File:                     66c9a6e0-0da8-3cdf-8d93-af2131e7914b.roa (raw, json)
Hash identifier:          Lp7Cv2JSh4LUYbODDosRDd/67A9tp29ozYiSMWNu1pY=
Subject key identifier:   D6:CB:9D:6E:C5:EF:19:DC:FF:1A:26:25:A3:D3:9E:1B:82:45:15:29
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7B6DF0AB0D7CED484180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66c9a6e0-0da8-3cdf-8d93-af2131e7914b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7b:6d:f0:ab:0d:7c:ed:48:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=51fd624d-dedf-4559-948d-759a5d84639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:87:d9:f3:93:dd:4c:57:f1:21:c6:48:0c:
                    c2:57:7b:17:ad:e9:af:29:94:ae:7d:07:ba:2b:37:
                    a6:90:be:d0:37:96:2a:18:80:f1:4c:7d:be:f7:4c:
                    8d:35:b0:56:81:27:c9:0d:f4:01:e8:c6:6f:e4:ed:
                    37:95:be:26:7b:c4:8e:f4:56:ee:e1:43:53:9d:c1:
                    83:2c:1d:56:14:1e:e4:06:87:f9:76:00:a0:7b:be:
                    ef:83:f7:71:06:76:e8:ba:58:b8:c5:5d:c9:b9:f5:
                    b3:3c:97:44:a0:de:39:95:e9:15:66:ed:21:9c:05:
                    b8:c0:06:4c:ac:3b:70:1b:0c:64:f6:7c:1b:46:f0:
                    70:4b:34:04:cd:50:52:a3:b4:4a:ea:07:25:7f:6e:
                    89:9e:b1:10:c8:23:07:79:45:1b:f0:17:40:80:04:
                    b2:d1:c7:06:de:18:36:59:ac:74:ae:99:5c:23:b4:
                    38:9b:37:38:a1:a6:61:42:37:a7:5f:23:0b:82:76:
                    06:1c:cb:20:fb:62:d2:51:91:9e:55:b1:71:e8:09:
                    99:ae:8b:4a:c3:1b:4b:79:c0:d2:41:09:6e:ea:6b:
                    3b:44:fa:17:27:00:e6:b5:6e:18:66:f8:ee:30:b1:
                    da:cb:7a:c5:40:09:39:de:d1:01:eb:e2:5c:43:70:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:9D:6E:C5:EF:19:DC:FF:1A:26:25:A3:D3:9E:1B:82:45:15:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66c9a6e0-0da8-3cdf-8d93-af2131e7914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:59:23:c3:de:65:c5:2a:e8:32:da:be:e5:f1:e8:ec:90:
         65:2d:b5:fe:d0:1d:b8:3c:61:6d:00:a8:f1:dd:48:06:89:1c:
         ca:a7:8f:df:31:d5:22:27:64:46:0d:f8:30:f5:06:93:ae:eb:
         0a:f6:fd:fe:1b:8c:00:9c:43:86:8a:78:86:83:7a:4b:f2:41:
         bb:96:bb:00:fb:79:80:06:ad:30:33:cd:f6:4c:2f:b7:78:b1:
         f4:c7:f6:5d:9e:8c:81:f9:b0:2f:12:7c:1f:7b:80:c9:8a:3f:
         6c:50:79:61:50:bb:aa:ad:bf:d3:4e:4e:6a:05:b2:25:79:f8:
         0d:b2:bb:5d:65:ed:e2:17:42:05:50:aa:80:43:ca:e6:be:d7:
         b1:36:47:d2:cb:00:4d:ad:61:72:04:3d:a5:fe:87:a0:23:6b:
         be:bd:a8:b9:04:63:99:03:01:ef:0b:4b:9f:28:9f:1f:b8:05:
         66:e1:89:5a:f1:60:1a:50:61:72:c4:d5:e4:8e:f8:a7:1a:58:
         e5:d5:94:e4:f3:48:16:96:c9:82:67:a1:cf:b1:9d:d3:01:3f:
         d6:25:e7:2b:b4:af:a7:d4:92:fc:ec:a9:2f:4c:a0:80:ed:c6:
         b4:33:2e:99:3f:a9:5a:78:ba:bd:dd:03:5d:6e:3d:c4:96:9d:
         2b:ab:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:23 2024 by rpki-client on console-fra.rpki-client.org