Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
File:                     ee78d578-cb00-360f-80f3-173b2465e141.roa (raw, json)
Hash identifier:          aFgJd1s2dwDFtktSxrQhdMh5RVptEYSrn6dIWZe6GU8=
Subject key identifier:   4F:01:39:02:CE:05:29:8B:9B:5C:32:F0:DF:D7:C7:1C:E2:77:62:19
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F43285847CFD4A28F3A24FA9661B4D740
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        104.249.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a2:8f:3a:24:fa:96:61:b4:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=6c2032ec-8b0e-46c4-9ecf-f0da192a93aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:aa:ca:a9:43:e2:aa:87:c0:c7:86:63:14:
                    32:c0:b0:5c:9d:2b:ae:b5:9e:1a:1b:ab:10:d7:2c:
                    a5:6a:4f:e5:34:f5:06:d5:eb:a2:ea:2e:2c:4e:bd:
                    3c:c4:f8:90:3e:22:b6:fd:62:e1:39:9e:a8:aa:c1:
                    28:09:3c:fa:94:c3:de:5d:d5:4a:bf:d6:1d:7d:23:
                    66:d6:15:3f:ef:95:aa:b3:60:a8:62:bb:53:2e:ec:
                    3c:64:6c:d9:ce:f0:ad:b8:9f:f6:24:57:e4:69:ff:
                    00:7f:a0:6f:ef:a5:3a:2c:03:57:38:f1:f9:56:f5:
                    05:3e:ec:af:ab:38:9e:c7:69:b3:9b:f8:96:5b:81:
                    2e:13:28:84:a5:1c:96:50:01:e2:4d:f6:d4:aa:67:
                    a3:a9:5d:a3:d3:bb:a6:b9:3f:9d:04:ec:8a:59:38:
                    b3:49:48:00:8f:c8:39:d4:3e:72:79:c2:a6:08:3a:
                    94:50:4e:80:ce:ec:a1:90:ed:e2:d7:63:4d:c0:89:
                    ba:72:14:fa:ab:22:cd:c6:c0:d9:f3:d0:dd:11:46:
                    19:83:77:d3:ec:13:b3:f1:ef:06:7e:2e:9b:84:e5:
                    fc:b7:1a:6e:44:81:84:ae:f2:a7:17:cb:32:f5:14:
                    32:50:cb:cb:da:d0:0d:56:67:58:0a:80:25:0d:8d:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:39:02:CE:05:29:8B:9B:5C:32:F0:DF:D7:C7:1C:E2:77:62:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:42:25:5f:77:6a:bb:7e:5c:a4:59:0e:33:44:b6:af:bf:
         db:87:5e:1b:62:06:95:4d:34:11:84:c7:b3:41:2c:41:cc:d2:
         90:5c:38:ff:29:fe:16:f4:3e:91:0a:06:72:a0:0f:74:77:c3:
         7d:fd:ee:c7:f4:2d:fe:0b:2e:41:82:70:b1:1e:d2:6d:cf:37:
         f8:8f:89:09:44:68:b0:38:87:13:03:cd:49:4b:9b:48:b0:79:
         e3:95:00:e5:99:4c:72:72:e6:aa:17:ce:a9:09:5a:6f:9f:3f:
         86:e4:71:2e:0a:98:98:fc:d1:54:97:e3:cc:5a:7d:da:e2:36:
         fb:e2:33:ad:4d:d6:ad:68:51:5b:a1:ab:f0:49:aa:59:b8:70:
         c8:53:5d:c7:df:08:13:20:56:17:e6:a0:65:7e:f8:4e:ef:1d:
         de:03:5c:41:59:7d:99:33:f7:4a:06:29:d4:ac:29:b7:ff:f3:
         c9:eb:ee:dc:a1:0d:dd:fe:c7:a5:2b:6e:94:ff:ac:09:af:98:
         59:86:57:2a:ba:ef:b9:9a:bc:ec:bb:49:88:7c:6e:6d:f8:c6:
         f6:71:1a:94:af:eb:67:30:dd:da:af:9c:d9:f4:6f:9f:2a:92:
         04:f2:e7:9e:fd:94:0b:0f:2d:8c:61:91:87:cd:cd:f9:ad:62:
         71:d4:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org