Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
File:                     88861554-d029-3df4-bb93-b6245c989af7.roa (raw, json)
Hash identifier:          gvv+DWz0uxzxO9id/iniwrVLW3Ms1hHvhRMD7B2fObw=
Subject key identifier:   55:64:A8:04:8E:04:8E:3D:35:F6:4C:EF:54:89:16:2B:DF:1E:A5:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0C651BDF5394644D6700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0c:65:1b:df:53:94:64:4d:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e9747513-1382-47c4-a80e-c27beb6e4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:f6:91:bc:12:0c:9a:9c:ee:38:68:fa:1d:
                    6d:04:17:12:2d:c7:70:e8:a7:d4:12:2b:74:aa:d1:
                    04:8a:1f:34:fd:a7:25:05:21:b4:6e:ec:3a:2d:f9:
                    22:70:6d:dd:8d:0d:d1:c0:81:6b:f3:a3:93:76:7e:
                    50:46:3d:d0:f6:e2:d4:9a:15:68:bb:27:71:13:3b:
                    92:9a:46:e4:c5:e3:1a:39:2a:63:38:c1:66:af:e5:
                    a9:e8:d3:43:a2:5a:11:69:f6:ff:76:61:1b:db:7b:
                    07:db:71:90:9d:a4:75:b7:08:20:5d:ff:f5:e9:4a:
                    c5:5d:fa:b3:72:56:d8:85:d7:5d:8a:74:cf:03:cb:
                    a0:db:4f:77:99:c4:13:e3:b2:f4:78:b5:74:50:c0:
                    cf:97:36:93:94:7a:ee:e3:84:60:3e:13:79:2c:13:
                    a4:a8:a7:59:ef:e4:da:e9:4f:3d:5d:dc:c0:fb:5c:
                    2b:5e:63:8a:64:91:17:e5:cb:90:46:cd:07:a7:e5:
                    03:48:dd:b7:07:ac:78:1f:8f:8e:d4:2d:c8:97:cd:
                    9e:41:62:d6:34:2f:5a:19:9b:b8:de:6d:22:cf:1c:
                    c4:20:98:ef:68:c6:08:9a:08:86:2c:2c:64:6d:84:
                    02:08:e1:c0:c5:f2:ae:b2:47:3e:17:75:e9:b5:18:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:A8:04:8E:04:8E:3D:35:F6:4C:EF:54:89:16:2B:DF:1E:A5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:af:66:e1:58:a4:e0:a3:23:7f:eb:6c:16:78:7a:15:43:
         f0:32:b4:b2:f8:36:f3:1c:24:02:7c:99:28:05:ad:a8:5a:4e:
         17:d6:31:6e:bb:a3:7f:af:bf:13:9f:7b:3a:2f:b6:f9:b5:d7:
         d6:2f:ee:17:73:a0:b1:f1:a5:cb:f2:fe:a4:8a:39:24:58:a0:
         f6:49:1e:0e:86:8c:1f:62:a4:5e:fe:a7:ed:eb:21:c8:f4:ce:
         24:e0:08:29:47:b5:18:65:88:82:d4:7e:7d:13:c6:d2:94:48:
         eb:86:b9:c1:c4:71:75:7b:a7:fa:d5:ec:59:fb:3d:b5:58:ba:
         72:65:9e:1e:fc:90:fc:21:62:d7:41:d1:2f:56:93:f4:79:6d:
         de:7a:bd:b6:77:d1:9f:6e:18:27:e3:a8:ca:f0:57:08:a0:c6:
         0c:ba:db:9d:f8:06:18:17:37:3b:7d:77:86:bc:90:d5:83:ec:
         6d:fe:be:1e:cf:e2:9e:35:54:b5:0c:81:b4:ac:49:a7:d7:34:
         b4:bc:db:b6:1a:d4:7a:18:ae:49:16:4c:6c:5a:d7:b6:7d:a8:
         c3:72:0d:ee:73:41:b4:a6:c3:be:81:1f:4e:01:82:b3:55:ce:
         09:62:e9:79:2a:30:35:05:7d:5c:f0:4f:a3:8e:54:04:fd:41:
         17:19:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:55 2024 by rpki-client on console-fra.rpki-client.org