Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa
File:                     bcb675ae-285c-35df-9170-d65297df0a1f.roa (raw, json)
Hash identifier:          jRwJiFyE22NvZTMo6Fvb+UUAN1F09raWsLM89Ujb7Do=
Subject key identifier:   A0:90:D6:3A:A6:B6:4A:04:F3:63:1B:70:3F:A6:10:4A:21:71:3C:0A
Certificate issuer:       /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
Certificate serial:       010D0C9F432858474F4B6AEDF1FFB0DD779FEA80
Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     92
IP address blocks:        128.153.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6a:ed:f1:ff:b0:dd:77:9f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=2ad4b246-0452-4232-a5ba-a750969f95da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:4d:08:3d:f0:62:39:10:b8:19:9e:04:84:
                    f4:4a:4c:95:ae:89:b4:19:0c:3d:b3:08:61:48:91:
                    19:82:80:d3:3e:2e:02:1d:91:51:a7:39:dc:90:d3:
                    4e:87:a9:4b:19:44:f9:59:32:f4:81:ac:d7:42:1c:
                    81:46:a6:4e:82:25:89:a9:2c:b9:4c:5e:f4:90:2b:
                    b0:65:4f:f6:e8:6e:c6:6a:3f:9c:3a:b1:68:14:c1:
                    45:8a:0c:3c:a8:4e:ea:3e:59:68:ad:3e:b5:cb:15:
                    17:a4:0c:4b:96:85:ab:18:18:bf:78:b0:8d:d4:94:
                    1c:2c:5c:5d:95:fb:c9:c6:6f:28:42:f8:b3:20:df:
                    27:fa:52:92:ea:64:af:18:2b:0a:88:b3:cf:66:fc:
                    a2:08:87:dd:e7:c3:bb:d7:01:0c:4c:f3:94:7c:97:
                    66:30:4f:2e:ce:72:90:a4:88:a6:ee:5f:4e:81:39:
                    af:cd:b3:1e:a1:0c:de:18:b5:30:0a:ff:98:5c:e6:
                    d7:4b:04:c2:55:f2:24:6d:14:a2:50:24:f2:6b:1e:
                    4f:b4:15:fa:22:ea:4e:cf:f6:ba:6c:9f:b1:ec:48:
                    bb:81:80:c9:c9:0a:07:25:92:19:29:97:11:15:7f:
                    c6:53:65:2a:e2:7f:cd:50:79:60:ad:2e:dd:d5:56:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:D6:3A:A6:B6:4A:04:F3:63:1B:70:3F:A6:10:4A:21:71:3C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl

            X509v3 Authority Key Identifier:
                keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.153.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:79:00:b0:bf:5b:bb:2b:77:1b:67:f1:ad:c8:44:78:18:
         e7:b4:36:91:0d:b6:4f:5a:36:fa:9a:5b:49:9d:6a:60:08:84:
         43:8a:f5:b7:74:45:0e:eb:2b:c9:97:69:61:3d:56:48:ae:62:
         fc:4c:a8:f4:52:c0:11:01:a5:65:f1:83:7f:8b:d7:59:4d:8c:
         98:7c:50:01:6a:eb:e6:09:a6:2c:56:b7:24:d2:41:00:d3:96:
         3e:c8:b1:e6:17:30:4a:14:2f:00:92:1b:1a:05:0e:e1:dc:07:
         0c:b7:a5:c5:17:c9:35:45:1c:b7:a2:3d:4d:26:d8:63:06:7c:
         97:fb:62:62:ba:01:7d:6b:d4:d9:55:13:c4:27:72:e8:44:ac:
         58:25:25:bb:d1:54:53:06:a8:4a:4b:0e:82:9e:fe:42:fc:76:
         46:15:80:dc:07:b2:66:3d:4f:03:e6:58:58:11:81:c1:06:1b:
         04:31:04:ab:aa:94:07:33:a2:8a:5b:a9:da:05:5d:e5:ed:8b:
         11:07:d3:67:39:f8:66:84:28:4c:5b:2d:69:c1:08:d5:77:aa:
         91:77:b4:1b:7e:4f:f5:00:ea:ab:9d:ee:5b:91:be:df:21:4f:
         1a:d9:a2:ad:76:50:a1:77:b7:fb:4f:9f:7b:0b:03:f8:6c:82:
         a0:46:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:35 2024 by rpki-client on console-ams.rpki-client.org