Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa
File:                     620162ba-97b6-3cf0-b68b-70b9a848c224.roa (raw, json)
Hash identifier:          VpDPnXhcaPRYW/P9Eac2rfYoffYMESHM3uIXO7C1Rs4=
Subject key identifier:   74:63:68:BB:41:08:5D:79:67:1F:DA:E3:AB:11:E8:AF:10:79:34:5A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847C05C1072008BB929CFD82B50
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     7018
IP address blocks:        142.111.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:10:72:00:8b:b9:29:cf:d8:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=d2dcd093-59fc-45a2-be5b-83c0d829817e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:53:65:f4:c5:a3:a3:79:66:ff:e9:ea:c0:
                    e9:a7:71:7f:52:b9:b4:03:13:09:a8:59:be:09:d0:
                    40:dc:37:de:de:05:09:34:f9:d3:3b:7c:41:8c:e6:
                    4b:2c:cf:9d:2e:ee:1e:d8:8e:98:14:9d:c7:ad:3f:
                    a7:ac:5f:72:eb:8b:aa:3a:2f:c7:06:bb:71:1d:98:
                    5e:8e:0f:de:5b:23:fa:b8:46:24:fc:07:96:92:7d:
                    ba:1b:47:4e:1b:0b:3b:69:47:31:58:32:51:87:9d:
                    a2:86:ba:bc:bc:eb:1d:1c:92:15:28:db:c1:1c:fc:
                    5e:e3:d4:06:19:54:b8:a9:26:0d:bc:a1:0f:e2:7f:
                    76:dd:25:27:ac:81:b7:bb:35:78:13:47:ac:25:72:
                    60:fa:b7:8b:3c:5b:34:98:33:b6:4d:01:27:2b:a9:
                    a6:44:cd:58:8a:a5:3d:80:bb:f6:7d:f6:f9:fe:3a:
                    47:cf:db:57:88:28:aa:01:e6:8c:91:f1:51:29:23:
                    4e:d8:ff:d3:b2:83:02:cd:b0:d0:0b:ce:fe:4d:57:
                    29:c1:60:f0:96:e4:8e:5e:1f:ae:9d:a4:e7:a5:95:
                    b6:31:e2:7b:1f:1b:84:cf:9e:21:13:9d:ad:bc:9d:
                    8d:8c:cc:96:9a:b3:f7:7c:5e:5e:6d:f6:f0:e7:dd:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:68:BB:41:08:5D:79:67:1F:DA:E3:AB:11:E8:AF:10:79:34:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:fa:b6:fa:c0:0f:93:40:c0:8d:4f:c8:7d:ed:0e:cf:6b:
         b2:0f:46:47:89:72:ac:4b:54:a9:20:f9:3c:cc:85:2d:ed:49:
         e9:31:a2:df:fc:08:81:08:04:28:75:24:1e:6d:d5:7d:2b:3d:
         d0:21:5e:e7:97:91:39:79:d0:88:dd:0a:d8:46:51:b2:9d:35:
         03:03:e2:1b:a3:bc:10:25:bb:de:00:a3:64:d5:4d:c2:f7:72:
         ae:94:cb:3a:d1:c3:68:80:f8:e1:d5:dc:6b:ac:87:30:de:41:
         b8:87:8c:c5:bc:9c:39:2c:66:7d:09:93:92:da:27:88:85:f1:
         cf:e5:b6:a6:0a:9f:32:b3:a4:44:73:4e:25:1f:9c:f3:f9:05:
         f4:1e:7e:16:b5:82:3a:5b:4d:b5:85:66:ee:28:81:8f:9c:cd:
         49:c5:b7:df:35:ab:7f:83:1b:b9:11:10:31:da:bd:4b:3a:c5:
         fc:71:79:c9:9f:ef:88:10:b5:08:7c:88:2c:c7:2b:b0:73:97:
         af:f6:7d:6d:c1:a1:82:a5:8e:76:3a:bc:31:50:47:2c:f3:2c:
         b7:e6:e2:4c:f0:8b:27:06:7c:9f:8e:77:9d:51:b5:4f:e5:95:
         36:f0:4e:54:68:7d:9c:75:0c:15:be:c9:86:2e:ab:e8:6d:be:
         17:d9:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:03 2024 by rpki-client on console-ams.rpki-client.org