Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa
File:                     c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json)
Hash identifier:          JsdJV8RSFSBIySAMUXymXpRYIMaZ7M4Z83BY0B2mOj0=
Subject key identifier:   D9:12:E4:69:22:76:0D:BD:4A:88:E4:0D:EF:80:55:25:7D:09:DD:90
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F432858476B3645F8814C18CB05037F80
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     35908
IP address blocks:        100.43.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:45:f8:81:4c:18:cb:05:03:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=7518bcbb-cabd-4f1f-af79-a2526179c95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:b1:3e:65:1d:5c:95:92:26:19:59:bf:fd:
                    78:bf:f3:b2:68:60:f2:f1:b4:7e:4f:f5:ca:09:7e:
                    fa:d4:91:f5:0d:ed:4d:98:01:46:90:a4:64:e5:77:
                    81:a6:53:77:2f:40:cf:50:7e:25:f9:3f:6e:e2:52:
                    a2:5a:a3:5f:9c:76:26:b0:11:ed:52:76:fe:c1:5a:
                    a4:0f:ea:cc:86:3a:52:7a:6f:01:e1:19:9d:af:8f:
                    e0:9b:9f:f1:ad:44:81:da:f2:eb:4f:be:84:bd:59:
                    50:45:dc:e2:1d:51:c3:70:e8:1a:ee:b5:c9:5f:97:
                    24:2a:24:2e:db:44:88:f1:d1:70:3f:bb:39:02:09:
                    37:58:23:e3:35:a2:16:a1:a8:25:c8:ea:af:05:b1:
                    9c:41:4a:30:ee:8e:68:ba:20:a8:06:61:68:03:47:
                    90:37:af:fc:36:57:7d:e1:6e:80:2f:6e:d0:a8:90:
                    d2:fd:6d:3b:e3:76:59:3f:2e:ee:3c:23:33:6f:2f:
                    6c:79:3e:c0:83:be:ea:6b:f3:36:7e:40:66:2c:02:
                    98:4a:61:33:bc:db:be:5c:9e:49:c7:5e:72:48:02:
                    ed:ee:b3:99:8f:59:e6:b0:96:5e:75:b4:fd:19:fc:
                    2d:a9:be:35:7f:e5:66:d3:85:3d:d4:6d:74:40:d8:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:E4:69:22:76:0D:BD:4A:88:E4:0D:EF:80:55:25:7D:09:DD:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:e3:2c:9f:94:ec:43:bf:86:f0:5c:7a:62:26:e3:b0:03:
         a0:69:16:1a:50:fb:ad:d7:d4:d5:e0:f9:ac:6c:ca:9f:44:ca:
         8c:6d:74:16:63:ef:a9:62:53:63:2b:f4:d8:f7:fb:a2:75:40:
         28:58:93:6b:4f:cc:d0:97:f7:1f:34:5c:ed:62:98:e0:45:47:
         39:6d:78:90:a9:a4:8c:1b:85:dd:99:cb:03:03:ca:c2:1f:38:
         1e:2e:03:d9:ba:a1:b3:a2:5e:60:17:da:e4:00:b4:40:a0:8a:
         7d:3d:f3:f5:90:8a:23:25:dc:bf:f6:76:07:03:70:19:a8:9a:
         34:60:ff:92:b9:d5:19:c6:c8:64:ad:7e:56:b8:22:5c:06:38:
         27:d1:d7:95:67:2f:92:5e:bd:94:66:a5:05:af:c4:e6:33:56:
         55:c0:da:b3:75:9b:35:79:84:85:21:56:64:8f:83:c4:7e:c0:
         64:07:85:77:6a:aa:80:06:8e:ef:03:c9:eb:40:80:fb:16:bf:
         2d:d7:be:5a:08:ca:d8:88:51:41:d5:90:51:cf:3b:1f:c1:09:
         67:e5:0e:d2:2e:be:d4:3d:e1:ff:cf:92:a9:b2:8c:f5:4e:0a:
         e6:51:c2:0b:a8:d4:99:76:8b:a5:9b:b3:4f:5b:68:13:74:88:
         c4:bb:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:23 2024 by rpki-client on console-ams.rpki-client.org