Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
File:                     f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa (raw, json)
Hash identifier:          3574APn+PulfQAby/NjaHzh85NaNNWS8JNLC8iojltk=
Subject key identifier:   82:47:9C:B4:C2:12:00:37:E1:1C:C4:FD:38:EC:8A:3E:DF:B7:9F:95
Certificate issuer:       /CN=60a3faac-69f1-4258-94e7-1128c7a528ea
Certificate serial:       010D0C9F432858477396612796E82232AEE2C000
Authority key identifier: 93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     36391
IP address blocks:        142.90.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:61:27:96:e8:22:32:ae:e2:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a3faac-69f1-4258-94e7-1128c7a528ea
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=c38131e6-d439-4ea3-b311-9fb04041af59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:7e:d4:2a:91:82:92:4b:ac:0d:81:0b:a8:
                    cc:79:f1:88:65:d8:93:31:b4:0b:b1:ac:e9:2a:57:
                    2a:bf:31:1e:57:aa:3c:36:aa:a7:46:a7:4c:56:a8:
                    33:ea:92:6e:03:67:aa:4a:cd:79:f1:ae:e6:21:9b:
                    75:49:af:90:97:4e:f5:79:3f:66:91:8f:bc:4d:88:
                    2b:25:1c:e6:57:c9:74:9a:a7:c0:5c:eb:27:e9:58:
                    6e:18:f4:43:3e:2b:c1:be:e8:22:c7:8e:38:01:9c:
                    2b:3c:eb:b4:89:83:80:f3:d0:49:8f:3a:ff:20:42:
                    c2:7b:1a:4d:70:7e:97:1e:03:f4:1e:57:85:40:20:
                    33:2d:f4:74:b5:f7:a4:b6:6b:ad:01:c3:b0:5e:76:
                    5c:08:12:1b:75:da:1e:6a:87:1b:f3:4e:58:57:ff:
                    0f:cf:71:2d:62:33:be:42:08:7f:bf:23:97:9f:d9:
                    0a:91:9d:3e:38:42:d7:2a:d6:14:fb:b5:37:61:a8:
                    42:d8:b0:20:09:3e:a5:3d:7b:d8:37:28:39:83:ba:
                    2f:bd:40:0e:fb:33:88:14:fc:e7:36:da:38:eb:73:
                    1b:cc:89:c0:56:98:26:79:12:73:df:d6:30:59:92:
                    36:10:23:f2:48:92:f5:33:78:64:e0:18:7f:db:d7:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:9C:B4:C2:12:00:37:E1:1C:C4:FD:38:EC:8A:3E:DF:B7:9F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.90.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:08:0c:bc:5a:da:15:96:e8:77:40:d9:6d:d4:1b:70:9a:
         eb:dd:0c:a2:36:fb:cb:e7:1b:25:f9:10:1b:bc:34:e9:c9:1a:
         9c:ca:e0:a8:cf:44:e7:21:49:ed:54:f1:50:79:d5:fe:ee:c0:
         05:90:f3:f5:7a:f4:3c:51:bc:02:bd:5f:7c:aa:e5:30:a4:c3:
         98:b5:85:a7:d2:c9:93:5d:f4:df:80:ca:c7:43:28:f8:b0:f3:
         67:82:0f:db:6a:8a:95:cc:98:10:ad:8e:d8:80:40:a5:7f:5c:
         b2:55:63:d4:6d:82:36:cb:f9:97:fd:eb:b2:02:07:dd:74:2d:
         ce:c7:09:cb:ba:c7:93:be:72:cc:53:4e:39:b5:0e:0e:ac:04:
         82:a4:95:dc:6b:41:0d:d8:ac:19:06:12:ab:f4:54:2b:c4:c5:
         b4:74:84:3a:91:49:7b:a0:ad:bb:0b:b8:39:e8:67:22:f3:8c:
         57:bd:74:39:7e:ac:81:0b:52:33:7a:c8:11:d9:0a:fd:a6:4a:
         31:31:6d:7b:f7:98:ab:29:0b:31:7c:da:e9:89:1b:8b:78:a2:
         ce:1d:d4:69:87:e6:bc:a0:90:14:b5:49:c7:b5:3a:7d:c8:c9:
         36:c4:e9:07:52:9a:64:0e:66:40:ed:de:09:37:b6:af:d0:9a:
         13:02:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org