Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa
File:                     e2891981-1f43-3d06-af0c-d6c2773b6277.roa (raw, json)
Hash identifier:          Zk7O2D1Z2v4CuyRIbcEPx0cGYxBZDfb0HZxGoj03KkQ=
Subject key identifier:   3D:41:3E:44:DC:99:8C:0A:20:39:FB:F1:A7:F3:5B:1C:77:BD:79:79
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F43285847AE36BD1770AFB5D6C614B900
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     63023
IP address blocks:        162.248.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:bd:17:70:af:b5:d6:c6:14:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=906edef5-6ced-4182-84af-305227452245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:71:8c:62:34:5e:31:1b:51:0a:58:47:db:
                    fa:78:d8:42:f9:f9:60:86:41:5b:5a:22:0b:0e:0c:
                    9d:84:09:f6:a8:cb:2b:f5:34:3f:c8:e8:03:0d:3c:
                    18:44:a7:d6:41:57:94:9d:4b:ad:04:d7:98:d6:47:
                    ec:1c:ca:fb:53:b2:a9:77:d7:9a:3a:40:f0:79:f7:
                    10:47:bc:9e:be:56:0a:42:4c:32:bf:e3:d7:a1:3d:
                    81:f3:f1:1c:f9:88:9e:e2:2a:6c:7c:13:4d:1e:43:
                    8f:42:fb:f6:0a:67:9a:da:17:53:3f:e8:c0:f8:50:
                    52:17:72:a1:1a:95:8f:4c:91:57:13:91:10:29:7a:
                    c8:49:90:ac:aa:ab:38:5c:4b:de:f1:39:c0:e8:48:
                    df:90:48:fd:86:a2:de:58:70:21:03:52:e5:bc:87:
                    80:47:49:b0:e9:e6:1c:ba:6c:d6:06:92:a3:d2:63:
                    88:94:24:1a:29:90:0a:86:c7:5e:c0:04:b3:12:24:
                    20:ef:70:49:15:4e:e7:34:16:34:6c:fe:d6:1c:6f:
                    a6:5a:b7:65:f6:0d:62:d4:5f:c7:fd:5f:b8:9e:ef:
                    1f:35:8e:79:27:b8:f4:56:a2:23:a4:4f:c1:2d:33:
                    fd:ff:e7:f4:4e:0b:3f:a1:f5:a6:a5:e4:01:63:d6:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:3E:44:DC:99:8C:0A:20:39:FB:F1:A7:F3:5B:1C:77:BD:79:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:14:3d:32:7b:9a:d3:5f:66:15:44:14:2c:df:95:c7:28:
         39:60:a0:2c:20:25:7b:2a:52:a7:0e:f3:4b:60:f0:ef:f9:ab:
         e6:5c:95:b6:fd:11:b3:8e:bb:33:8b:cd:ac:06:6e:43:84:a3:
         bb:c6:0f:a0:20:fd:48:f8:0c:69:95:e1:bf:a2:61:64:e7:a5:
         53:75:e1:18:da:80:d7:78:cb:34:bc:2f:03:3e:62:74:fb:b0:
         fb:9f:66:fb:44:61:56:19:3d:4e:ef:43:e6:b6:e1:8b:8a:36:
         94:5e:56:1b:d8:b0:d3:a1:95:26:d2:17:8b:90:95:8e:ab:91:
         d4:9d:37:44:02:de:38:7d:73:16:ce:ef:4d:2b:db:da:e6:54:
         f9:97:0e:4c:06:b3:02:dc:cc:30:89:b3:de:17:05:4c:94:b4:
         fc:5e:c1:f7:bd:29:90:9b:68:ed:fb:18:2d:6d:7c:c9:c8:81:
         06:85:ad:29:78:ee:74:fc:13:f2:a4:4f:93:4f:90:b5:96:24:
         8b:4a:95:9b:2d:b4:7d:71:9f:2b:aa:33:11:e7:a3:aa:89:23:
         b3:bd:49:3f:8b:1b:18:88:88:ba:fb:15:e9:63:8c:6f:41:0c:
         bb:6f:c5:b0:bb:21:3b:2b:aa:4b:63:58:ad:e3:ef:37:81:b4:
         28:a8:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 04:58:29 2024 by rpki-client on console-fra.rpki-client.org