Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa
File:                     9c31740b-6dee-303e-a41e-afaf27f3c49e.roa (raw, json)
Hash identifier:          T+dF8BqvQ4XDRNfiiLhABdmrO+og1I71O1dP1N0OsJ0=
Subject key identifier:   1B:28:2A:B6:38:87:6E:2A:B5:06:C3:81:47:8E:1E:5B:16:60:BB:EE
Certificate issuer:       /CN=461640c3-4830-4680-b242-767100bf2245
Certificate serial:       010D0C9F4328584782F1034DD3C4AF5919DC7040
Authority key identifier: 1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     62807
IP address blocks:        128.254.168.0/22 maxlen: 24
                          192.84.255.0/24 maxlen: 24
                          198.54.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:03:4d:d3:c4:af:59:19:dc:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461640c3-4830-4680-b242-767100bf2245
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=bddfb4e0-95b5-4108-b771-62d506f31ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:b4:54:3d:e5:f2:9e:28:c1:ed:dd:73:fa:
                    22:96:e4:8f:68:31:5a:10:1b:de:be:3d:ae:db:ad:
                    a0:5a:6a:30:e7:06:9d:ee:71:06:b5:ce:0f:b9:41:
                    7d:c8:34:ef:1b:13:25:b9:bd:1e:04:e8:4c:03:a3:
                    08:2a:93:db:9b:53:3a:5c:82:6f:e8:ed:bd:d6:99:
                    9f:47:f2:4b:28:03:b1:8a:1f:50:39:e6:9e:63:18:
                    18:35:a1:37:7f:16:c1:d9:d8:d2:4b:51:3b:6b:c0:
                    08:b3:8d:ea:12:70:65:9f:2d:e4:9c:47:cc:e6:66:
                    3f:7e:27:e2:72:b0:7e:29:b9:9d:5d:9d:68:ce:d4:
                    fe:aa:85:5b:e9:aa:9f:39:35:d3:3a:8f:4a:0c:54:
                    a1:67:d0:f0:6c:eb:85:19:e3:01:84:77:b9:b3:83:
                    ae:55:f2:7f:79:db:7e:12:a1:d1:1d:31:0b:12:10:
                    40:a0:57:28:30:fa:d6:f3:82:c9:e5:f5:f9:c8:bc:
                    1f:65:bb:7e:d4:0d:2a:99:da:61:f0:5e:ae:71:61:
                    31:23:d3:a7:01:07:33:cb:7a:67:fb:30:c3:0b:77:
                    c7:14:af:84:21:08:35:c8:f1:c7:d8:61:52:c1:74:
                    19:13:79:b2:3d:d2:44:2c:a3:bb:e8:cc:21:0f:47:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:28:2A:B6:38:87:6E:2A:B5:06:C3:81:47:8E:1E:5B:16:60:BB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl

            X509v3 Authority Key Identifier:
                keyid:1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.168.0/22
                  192.84.255.0/24
                  198.54.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:d6:31:2e:4e:88:10:28:b7:ea:7a:bc:69:bf:5e:c6:98:
         89:86:72:f9:14:3d:70:16:fd:1a:ef:7d:bc:8d:bf:52:c6:35:
         6b:37:b9:ca:48:0c:61:f8:fc:75:a6:4a:be:0a:72:8f:88:3a:
         cd:48:1b:df:fc:79:18:9b:23:4d:1a:e3:b1:7b:b6:2b:ec:48:
         54:e7:14:72:09:23:89:f2:b7:77:f2:12:35:d2:18:a6:28:49:
         8e:75:1e:4a:7e:61:21:99:98:54:8f:40:b1:d5:9d:8b:cb:0b:
         70:cb:4d:7f:33:c1:44:26:0e:95:cd:89:5d:f9:61:57:ae:99:
         c0:1f:bb:5a:43:f4:66:92:bc:47:c2:4e:84:6e:f9:83:a8:ba:
         06:8f:68:d6:3b:e0:e6:73:f5:7b:60:61:02:1f:13:cd:e1:5a:
         59:fd:5a:3e:3e:bc:d3:eb:11:86:94:02:c1:14:85:b4:6e:d9:
         9c:56:5f:aa:e7:05:54:cd:ce:62:5b:35:ef:01:0c:36:ab:bb:
         48:00:7c:e5:28:9a:70:32:b2:c3:cb:77:56:12:9f:82:c6:f5:
         4e:21:89:45:cb:c2:49:04:9c:e8:9a:08:28:9a:ee:68:7e:e9:
         ab:4c:b3:ba:84:ae:9e:19:4e:1a:ba:ea:0e:62:6c:04:d1:fa:
         f4:c0:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:20:52 2024 by rpki-client on console-ams.rpki-client.org