Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa
File:                     de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa (raw, json)
Hash identifier:          Vdhsuqf31j7waM4lb0uZ6cg3DErudALs0KFHRr5DH74=
Subject key identifier:   A5:07:4D:4F:5D:CE:F5:82:C7:4A:D4:43:F4:D8:BE:E9:87:7E:64:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2755275D58199B75AE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:27:55:27:5d:58:19:9b:75:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f7088ffb-b5ce-4eaa-8fa0-a97737ea485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:9b:b3:6b:f1:9e:01:46:fc:31:de:f4:b9:
                    f8:ca:2c:b5:bc:6d:5a:34:c5:64:5d:d0:1c:b4:28:
                    41:7e:92:a2:06:72:14:18:aa:47:a4:d1:68:4a:de:
                    aa:d4:12:d1:df:1a:66:9c:5d:da:70:24:32:b2:2c:
                    9b:f6:af:27:aa:1e:5e:a4:d6:67:09:ff:c3:c4:f2:
                    e5:47:5a:99:e8:5b:5f:5a:5e:6e:a2:1a:ed:6c:c1:
                    25:f9:90:3d:97:cb:e4:56:e3:7a:71:68:d5:a0:ec:
                    9c:6d:bb:d4:28:79:2c:8e:de:72:48:62:f7:d9:c9:
                    c2:2e:e7:f6:aa:57:7a:c2:9c:85:47:e6:2b:7d:ba:
                    82:7f:58:45:5d:b3:be:98:d5:69:ca:4f:05:45:ae:
                    48:d9:f0:08:c3:a0:1c:e0:8c:5b:d9:da:a8:c5:eb:
                    3e:89:8b:66:22:d3:03:1d:db:8c:4f:ae:d6:c6:f4:
                    7e:8b:f5:f3:31:0a:e0:37:ad:4e:3a:d9:e6:22:b6:
                    e9:11:f6:11:8a:26:a6:e3:f4:9a:c7:ab:0c:96:8d:
                    1b:7b:49:9d:22:a9:14:ca:00:71:77:2b:fc:09:4c:
                    8a:be:da:5d:23:ae:2e:4e:08:3a:f7:1b:3c:25:40:
                    3f:ea:62:12:c7:9c:b2:da:7c:05:44:81:3c:42:98:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:4D:4F:5D:CE:F5:82:C7:4A:D4:43:F4:D8:BE:E9:87:7E:64:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:45:34:3e:38:b8:5d:a2:82:ba:7e:c3:dc:3b:8b:3f:e1:
         b8:dd:bc:52:4a:a7:8c:2c:34:f4:94:c5:e3:df:6b:b0:ea:74:
         97:d0:35:e7:ed:12:2d:25:3b:da:a9:db:03:15:0d:25:da:53:
         4d:c8:ba:fe:c0:19:7e:47:26:5e:46:3f:81:d0:d2:2d:4d:24:
         5c:6a:16:44:dc:de:c1:67:e2:60:ac:48:ea:03:12:5c:df:12:
         d2:87:5d:f5:14:fb:ac:7b:69:15:dd:71:1c:bb:e8:23:99:1e:
         1b:54:9a:40:1a:b4:21:73:ea:12:64:62:67:6c:33:f8:0e:a6:
         7f:61:55:34:06:d1:6d:4b:d9:e1:22:5d:de:16:53:be:3d:bd:
         3c:a2:98:02:cd:ef:78:bd:8a:6f:ad:bf:e1:50:5e:ad:cc:0b:
         60:8d:af:4f:bf:b7:6a:60:88:85:26:51:cc:23:15:12:f2:d1:
         bc:74:77:1b:98:81:de:8c:9b:88:d1:65:8d:ac:83:e8:d5:bb:
         f9:79:e9:5e:11:98:d5:b1:39:a7:ae:e4:6a:10:d1:0d:57:51:
         a6:18:8b:41:91:77:e6:72:bf:0f:14:e2:28:fb:98:d9:b4:c6:
         6c:5e:f0:60:b3:15:1e:28:0e:3b:a1:87:4d:11:41:89:2b:5d:
         25:22:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:57 2024 by rpki-client on console-ams.rpki-client.org