Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
File:                     2e040eec-70e3-3761-847a-129348c183fe.roa (raw, json)
Hash identifier:          /NfMYljNIkz/LdmYOlNralU6TwWp3znQQZfqujKI/kU=
Subject key identifier:   06:45:6B:99:5E:EA:1E:EE:3D:9D:7D:69:BC:01:52:4A:A9:8A:66:A0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847A4712F3E81F85477BE903E80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     198949
IP address blocks:        163.253.32.0/24 maxlen: 24
                          163.253.34.0/24 maxlen: 24
                          2001:468:2610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:2f:3e:81:f8:54:77:be:90:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=45ca80b1-c2b4-4053-b989-596fad25e40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:bc:55:78:3a:b4:bb:b1:b9:ca:8e:97:25:
                    6b:62:6d:6b:9b:65:34:6a:cc:9f:31:00:40:ff:e1:
                    5d:7d:fb:d2:ad:ad:f5:d0:3b:99:94:52:f5:33:b2:
                    9b:8e:2d:0a:4a:d3:2a:18:63:5c:a3:e9:c9:56:50:
                    1f:da:28:34:c3:7c:1d:36:ea:54:34:1b:53:75:16:
                    f7:79:0e:84:02:1c:58:4d:12:64:fb:b6:1e:61:1c:
                    61:58:77:d1:70:58:a6:2d:7b:42:2a:47:95:11:e3:
                    1b:6f:e8:d3:31:8c:b3:7d:4a:ff:19:e6:57:38:e4:
                    fb:b1:98:a8:6d:e3:30:1a:03:54:1a:b2:93:8b:0b:
                    24:1f:bc:d8:02:dd:83:bb:4c:29:17:77:62:24:91:
                    77:81:03:d7:7d:72:ed:db:85:e2:9d:d1:9c:96:5b:
                    9c:6e:8d:cb:96:64:59:f7:44:3e:5c:52:41:01:63:
                    09:ba:a1:ac:fd:e5:5d:60:e1:74:cf:97:9a:7a:8b:
                    dd:89:c3:0a:99:01:7b:78:f5:fe:f0:0b:43:3c:7c:
                    d2:2f:2d:09:34:78:7c:1a:a7:30:bb:25:76:78:64:
                    7c:d3:b6:c7:1b:3d:a9:f0:04:08:13:8c:30:01:6d:
                    bf:09:52:46:47:91:8d:cd:42:33:d7:3a:79:9d:69:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:45:6B:99:5E:EA:1E:EE:3D:9D:7D:69:BC:01:52:4A:A9:8A:66:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.32.0/24
                  163.253.34.0/24
                IPv6:
                  2001:468:2610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:14:9b:9a:ce:07:c8:f9:18:aa:55:ac:74:cf:a2:fd:05:a3:
         fb:42:6a:ab:c6:c4:89:82:05:b3:73:38:a4:f4:a1:f7:b3:66:
         97:45:51:e8:7f:1c:e2:35:48:ec:57:20:6b:34:62:eb:f4:a8:
         d0:2c:a9:43:62:99:a5:dc:01:8c:61:25:2e:60:7f:b1:e9:51:
         a0:a6:2c:02:e6:77:4e:9e:4b:0e:71:be:77:51:a2:4f:2b:cd:
         a2:7b:c6:e4:c1:54:e4:6d:1d:a5:b2:55:3f:e5:9b:30:59:c6:
         37:ce:55:49:c7:ec:a5:fd:93:7e:77:c6:3c:f2:3f:fc:1f:5f:
         70:48:84:5c:cb:e7:84:42:52:9c:7c:f3:43:64:79:da:d8:b1:
         ba:19:05:e9:b4:54:8f:81:99:36:79:d3:51:7d:e7:4a:57:e6:
         7f:29:8f:93:1a:35:3e:1b:c3:af:12:10:0f:0b:fe:6f:af:e7:
         c8:b4:e3:67:7c:0d:9e:7f:50:2b:ca:23:47:4d:84:f9:cc:05:
         82:43:f5:a2:19:f6:f7:1b:e4:0c:84:4e:d8:93:5c:4f:ee:fa:
         ae:0c:ed:96:50:31:47:30:fd:1f:88:d5:94:92:d1:8f:66:e6:
         47:f5:89:e2:6b:ca:ff:b4:3a:57:7e:9a:cc:b0:02:66:20:a8:
         d0:73:96:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:55 2024 by rpki-client on console-ams.rpki-client.org