Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd86f25d-aa5c-36c9-87d8-200e832e17b4.roa
File:                     dd86f25d-aa5c-36c9-87d8-200e832e17b4.roa (raw, json)
Hash identifier:          0lNoHwKtQYGCtTF3tiAaoTMgdZ4a1Yhhmm1VCHQMspw=
Subject key identifier:   6C:BE:17:F6:BD:34:36:5A:8E:1B:56:7B:06:D1:54:CA:FE:08:47:C0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858471FD5C2D5001DC89072877C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd86f25d-aa5c-36c9-87d8-200e832e17b4.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19893
IP address blocks:        168.143.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:c2:d5:00:1d:c8:90:72:87:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=76857971-8b3d-4fa8-a1f8-5f5d6172e5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:d7:f0:f1:f9:21:e5:c3:7b:d8:db:69:f6:
                    9f:d1:0d:f5:bc:a3:b2:93:17:0f:db:34:0e:62:08:
                    f8:80:99:d7:93:51:08:44:98:4d:9e:fa:04:13:2d:
                    e7:6c:73:b5:96:45:37:7b:7a:35:38:11:4c:06:bb:
                    4f:a3:41:ff:10:ed:75:ca:8e:6f:db:a4:e5:48:38:
                    cb:36:8b:f9:0b:6c:c0:5c:6b:3f:4a:d6:90:39:63:
                    3a:67:a0:ea:a9:46:42:a7:a1:89:8d:f6:28:22:fc:
                    58:37:35:db:24:44:10:d1:69:81:10:e7:64:62:01:
                    95:da:e3:8e:80:a8:05:b8:15:cc:b4:cf:be:fc:75:
                    8d:1d:18:39:e3:93:1b:31:2c:37:72:5e:2a:f9:0c:
                    2d:7f:cd:54:85:16:dc:25:cf:eb:f5:83:21:18:63:
                    f3:8f:95:10:c9:d6:07:ae:d9:82:5c:80:d7:d4:1b:
                    4f:1c:6f:5e:ba:80:d4:2d:5a:52:8d:5e:f7:0a:8a:
                    a3:4f:44:79:65:8b:e6:a5:ec:b0:cf:18:49:3d:03:
                    db:bc:81:97:f7:d5:9a:33:e3:cf:22:68:53:28:08:
                    b3:eb:8b:8f:ec:4d:1e:1e:dd:36:ce:8d:40:05:20:
                    f1:79:69:c7:a3:73:39:55:d6:46:34:4a:92:8a:db:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BE:17:F6:BD:34:36:5A:8E:1B:56:7B:06:D1:54:CA:FE:08:47:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd86f25d-aa5c-36c9-87d8-200e832e17b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:09:6c:aa:e1:16:3b:94:e5:5f:52:07:f9:bb:4b:f4:1e:
         07:14:7b:ef:13:0b:6c:b1:9c:27:dc:0b:6c:4f:0f:a6:46:c2:
         4f:5e:73:35:1c:0f:ee:10:34:a3:d6:fb:62:0e:03:54:d6:0c:
         67:11:d3:e7:14:d1:0b:9f:9e:42:42:c9:b4:25:4b:2e:ad:d1:
         37:86:fd:ce:73:47:54:c1:df:ce:33:3b:3d:30:77:4f:49:23:
         02:90:ff:38:c0:bb:77:5f:b7:74:1b:3e:df:42:63:fc:3a:12:
         ec:b5:43:63:dd:6d:f1:13:cd:da:15:68:c6:74:0c:2c:3b:10:
         54:8c:6a:b2:ca:aa:b1:d0:61:8d:b2:2e:78:8b:0b:70:22:4b:
         ef:35:6e:31:f8:78:ef:70:3c:28:e4:5b:c8:ed:52:b9:dc:25:
         be:3a:22:04:22:2f:0c:85:57:8c:f8:1b:96:2d:67:b3:50:9b:
         b9:aa:70:16:c9:ab:80:1d:52:bd:0a:31:72:6b:21:35:2b:69:
         ca:47:7e:c4:5e:af:3f:15:a4:db:14:1f:5b:4e:9b:c9:d6:09:
         89:09:78:d9:34:9d:cc:9e:2e:a6:99:d7:e6:36:66:b4:af:74:
         10:2e:44:17:e7:9c:40:92:4b:29:4c:18:52:7a:57:26:19:77:
         9d:39:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:08 2024 by rpki-client on console-fra.rpki-client.org