Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/cb72a44d-256c-39ca-a0bc-1c64170a2a50.roa
File:                     cb72a44d-256c-39ca-a0bc-1c64170a2a50.roa (raw, json)
Hash identifier:          u3zlhjb9K9XukS0Pfot4gFPNl/ew+z1rhMMo6Kz0POk=
Subject key identifier:   20:57:BD:5B:CD:E8:BA:2D:5F:E1:81:27:E7:00:F7:20:36:ED:BF:B0
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F432858478456745499C6A5B6A19C7780
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/cb72a44d-256c-39ca-a0bc-1c64170a2a50.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     2495
IP address blocks:        164.113.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:74:54:99:c6:a5:b6:a1:9c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=dd05530c-252a-41f9-b3b1-8b229b457dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:ef:56:0c:13:c1:83:62:51:4c:d5:e7:0a:
                    bf:62:5a:e0:c1:ae:ad:74:26:9a:a4:e5:12:87:4f:
                    d0:04:ae:ff:d0:1a:2e:4d:87:f3:99:6e:e7:48:5c:
                    33:f6:f4:ce:d4:bd:b1:9b:64:25:0d:a9:7e:14:e2:
                    20:bc:d6:a6:d3:91:e3:ea:03:59:f6:ee:2d:ed:36:
                    4f:00:46:a6:88:99:14:e4:c2:fa:1c:63:41:2f:c3:
                    7d:64:00:07:cc:f4:72:46:e7:7d:1a:ae:14:da:fe:
                    a5:62:eb:74:7f:c1:0c:89:eb:23:41:97:9d:86:3a:
                    22:e8:3f:3e:02:32:d2:cf:9c:32:4e:fb:bc:b8:f7:
                    8a:0a:ed:b7:5e:5f:e4:72:10:e7:8c:6f:d9:a4:f3:
                    90:bc:43:fb:f3:2d:ab:37:a1:ef:0e:5b:9d:64:ec:
                    66:94:41:1e:b0:41:ff:2e:7b:dc:ac:dd:70:05:4a:
                    13:0e:f6:84:fa:39:ae:c6:3d:92:d2:5b:b2:d2:0d:
                    84:3e:7f:d4:57:df:75:d5:9a:59:36:08:65:fd:41:
                    e4:bd:af:93:15:15:7b:36:04:04:07:22:6d:56:05:
                    68:ca:05:50:8a:1f:ff:4b:db:9c:0f:f6:3e:6f:fc:
                    aa:71:3a:fb:c7:3f:23:5d:13:5e:8b:71:21:3d:67:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:BD:5B:CD:E8:BA:2D:5F:E1:81:27:E7:00:F7:20:36:ED:BF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/cb72a44d-256c-39ca-a0bc-1c64170a2a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:9c:32:91:9f:a6:48:7f:e4:ec:10:24:d3:7c:1d:14:5c:
         ce:3b:86:41:17:be:d8:89:0a:bb:db:1a:85:dd:90:88:01:ad:
         b6:b9:4c:ed:77:2c:22:db:fa:2b:29:91:dd:07:bb:e9:43:5c:
         d0:14:62:ed:c2:5b:70:d9:b9:d8:e2:3b:25:cf:1f:a9:00:85:
         98:90:c2:56:37:1f:1b:e9:d1:93:b5:65:7b:fb:82:30:d2:e1:
         83:02:9f:a4:a6:ae:9b:af:b7:9d:f1:06:00:f0:04:7e:5f:98:
         4d:36:85:02:60:b9:e0:f8:58:21:dc:bd:8b:28:8f:c1:77:91:
         2b:06:f3:bb:2b:ae:88:80:12:0d:e6:af:b4:62:5e:cf:a4:57:
         e2:c7:e1:61:53:d2:f2:ce:5d:b1:8f:04:a5:f2:b2:97:d7:69:
         ac:28:92:ca:42:eb:34:c7:0e:70:c6:f4:69:4a:d2:12:dd:0f:
         1d:64:76:e8:eb:da:19:0b:1b:7e:cb:f4:dd:7a:59:51:4a:fa:
         b3:93:81:bb:fb:b9:91:72:71:61:b0:30:87:c9:54:d4:11:94:
         f8:52:d3:44:9b:f3:fe:d2:d4:ef:13:e7:8f:7f:bd:66:c1:2e:
         6a:fa:9a:ff:af:43:5b:fe:1f:ae:f9:fb:de:ce:1b:e9:34:51:
         fc:25:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:35 2024 by rpki-client on console-ams.rpki-client.org