Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa
File:                     2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa (raw, json)
Hash identifier:          yrSrdfwjsTXjcCUeHzvVbc7+SO7GuNwfECvh7pR1vIs=
Subject key identifier:   29:20:05:72:F4:58:2D:92:81:EC:B4:70:58:13:C5:A1:B4:39:07:50
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F43285847EE8A3CEA2A89095A7180DB40
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     14618
IP address blocks:        104.237.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:ea:2a:89:09:5a:71:80:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=f25a9c08-18f0-4b04-8066-5ffb407d0c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:db:07:b3:b8:6f:2c:5d:95:5f:ca:f8:65:
                    f4:65:65:06:3d:52:76:06:c4:f2:f6:86:0a:2b:eb:
                    ce:3e:f1:2a:0e:76:dd:7a:36:5c:17:6e:03:dd:31:
                    6f:0b:db:37:04:02:ea:0c:fa:74:c6:37:65:b4:f2:
                    56:29:ae:70:f6:2b:d8:b8:fd:99:b1:6e:e1:9e:1d:
                    b9:9f:4d:45:f6:98:f7:3a:fa:79:44:9e:44:05:9a:
                    34:2d:3d:27:70:1f:b2:45:e4:8e:08:20:83:c6:42:
                    50:1e:a7:25:43:17:26:06:24:2f:1a:4f:6d:a1:66:
                    ac:db:ec:7d:41:a6:5d:00:30:ae:2c:9c:d8:cc:53:
                    7b:b4:4b:07:d8:09:4d:bd:e8:b1:42:85:02:ba:ca:
                    7b:e6:58:22:b8:ab:a3:e6:6b:60:12:e4:75:15:29:
                    b4:a3:83:95:0d:a3:a7:26:ab:6e:63:4b:4f:21:fc:
                    87:3e:e7:4a:46:04:51:ad:1a:c4:a8:f9:aa:2e:b9:
                    a0:af:7f:45:c1:04:df:e8:6f:01:00:f7:bd:87:90:
                    6b:96:8e:3d:7d:81:1a:09:a1:33:93:02:b1:f4:a6:
                    7d:d5:cb:ec:68:87:a7:f9:13:69:d7:a1:a1:98:f5:
                    31:2e:b6:66:a9:bc:f2:be:6a:bd:d4:4a:67:1f:15:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:05:72:F4:58:2D:92:81:EC:B4:70:58:13:C5:A1:B4:39:07:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:24:01:9d:a2:05:6f:59:86:83:d6:19:79:ae:35:4c:fb:
         3c:75:7d:35:ba:06:34:6c:b1:55:52:bb:67:7a:91:36:7b:c6:
         ad:7f:0e:02:80:fd:c2:9d:73:e9:de:9f:70:65:17:c4:0f:91:
         80:c8:94:0d:cd:44:15:54:fc:18:15:5f:af:5a:71:39:7f:03:
         cf:c1:98:ca:15:59:0b:7c:c7:d3:f1:99:4a:33:29:55:2b:df:
         f3:74:f2:6f:61:2f:07:83:4f:bd:90:c2:21:47:bb:15:07:ef:
         69:31:9e:1c:35:79:91:79:f7:29:46:70:51:a3:62:ff:9d:af:
         69:11:7d:da:57:75:2a:b9:e1:bd:d7:e6:1f:2a:b6:e2:37:f0:
         57:00:1b:11:6c:75:a2:55:3e:c4:8b:63:96:8e:bf:d5:d8:97:
         ff:a1:59:f9:6d:6d:8f:5d:b7:68:d2:49:74:ef:74:c8:22:30:
         dd:d7:4c:78:a9:21:ee:76:5d:c7:44:59:38:7b:f9:09:a7:6b:
         f6:fa:a6:15:bb:6e:1a:f8:fb:af:51:74:e9:04:2a:0c:2a:e7:
         30:29:9d:cf:d8:68:d5:71:a7:8f:b4:19:2c:f2:27:e0:00:0d:
         07:0e:47:4c:f7:a5:68:54:b3:06:aa:e7:d6:2d:2b:d8:57:d1:
         f4:c7:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org