Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/881dd89a-3c41-3a8f-9210-0615e39f8be1.roa
File:                     881dd89a-3c41-3a8f-9210-0615e39f8be1.roa (raw, json)
Hash identifier:          J71NfmKUYcfm29Qlhlw5jeFJzj5+XoXaf/gZZ6nU+zM=
Subject key identifier:   4A:F6:C2:1F:95:07:9D:7D:55:ED:45:BD:2A:8F:55:CF:F3:83:1D:64
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858479516939C4A653BB776D24DC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/881dd89a-3c41-3a8f-9210-0615e39f8be1.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     36527
IP address blocks:        184.178.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:93:9c:4a:65:3b:b7:76:d2:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=20aca53c-ce17-4e5f-987c-ea16ef53ca25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:75:7d:82:29:de:01:a3:96:d1:46:79:d2:
                    8e:86:46:11:8a:8b:1c:bc:75:c7:2f:c2:0c:71:23:
                    01:c8:7a:12:6d:63:6b:4c:ef:49:7e:78:10:6a:47:
                    fb:fc:39:d1:37:13:1f:a6:85:82:31:08:11:c7:77:
                    02:ad:69:5c:92:39:0d:8d:c8:9e:23:d4:c6:c2:1a:
                    66:3e:7e:61:43:ff:64:4a:a2:21:8c:9e:72:58:4d:
                    b8:1e:c8:4c:ab:01:6a:b7:b9:00:e8:3f:1d:57:eb:
                    26:77:74:2a:7b:de:0c:0e:70:a0:b6:af:ce:5f:65:
                    42:3b:99:b0:1a:f2:bc:69:cd:ff:26:df:5e:4f:b0:
                    6d:5f:f7:3c:01:fc:8c:fa:b8:0a:01:67:46:2e:b7:
                    70:36:5d:f9:05:a5:39:bb:0d:31:19:55:fa:dc:f5:
                    41:6b:dd:6c:f8:04:47:46:37:73:43:f9:45:44:20:
                    6b:7f:12:38:52:ab:17:cc:fd:d6:d2:34:89:b7:74:
                    60:83:af:94:9c:a9:9b:c5:57:c0:41:62:38:12:13:
                    7e:a8:bd:9f:5d:66:b5:aa:7f:66:eb:9e:40:fd:c5:
                    7f:ab:45:da:3c:8b:94:3a:2f:9c:f9:c6:67:38:a6:
                    db:57:88:61:cf:fc:74:ec:d5:10:bb:17:11:fa:0d:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:C2:1F:95:07:9D:7D:55:ED:45:BD:2A:8F:55:CF:F3:83:1D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/881dd89a-3c41-3a8f-9210-0615e39f8be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.178.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:b3:bc:62:ec:64:26:55:c3:28:f6:5a:50:8e:cb:a0:35:
         59:be:b7:f5:cc:c4:91:b2:a8:53:85:4d:76:74:7d:57:a9:d7:
         4e:64:f5:35:c3:ed:3e:56:8e:a2:ae:07:53:01:6c:c7:64:b8:
         fb:21:b7:10:1e:1f:93:b0:0f:5b:b0:5f:63:68:60:23:f7:56:
         fe:a6:f1:62:5a:41:02:4b:80:44:06:cc:78:88:77:c4:c9:56:
         2e:fb:19:f9:43:f4:c6:d2:f7:1a:9b:97:f3:89:19:4e:f9:fc:
         38:d1:79:69:bb:20:a6:02:7b:32:8a:b4:7a:71:e5:83:12:eb:
         75:79:62:39:fd:f7:07:be:d9:fd:97:fa:2f:22:42:76:df:ad:
         aa:69:68:f7:89:90:84:e9:a3:29:fb:aa:dc:0e:f0:55:e5:6c:
         1f:6d:3a:ab:ed:68:3e:37:2e:6c:ef:06:26:9d:d6:c8:4e:04:
         73:f5:2e:5e:14:c6:76:0c:08:9f:c7:e1:62:59:28:a8:9a:e1:
         22:3f:4e:da:43:3d:eb:33:12:5f:ba:51:cc:44:7e:7c:ff:de:
         e4:17:61:72:0a:6f:04:4e:18:94:1f:41:5b:75:9b:32:73:13:
         9f:08:be:34:86:02:51:eb:1a:38:75:2f:db:64:24:17:bc:d3:
         90:cb:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:00:07 2024 by rpki-client on console-fra.rpki-client.org