Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa
File:                     91659b14-1fa3-39a1-8710-69be8ad85679.roa (raw, json)
Hash identifier:          yUs4kuseB/DJ1QbvRBQU/tU5js1TCkm+3QKyXXIas6M=
Subject key identifier:   C2:04:16:0F:9B:FC:07:74:92:1E:F2:70:63:B2:D4:B5:2F:86:30:BB
Certificate issuer:       /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
Certificate serial:       010D0C9F4328584765A0EEC74B030B8885353D00
Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        162.33.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ee:c7:4b:03:0b:88:85:35:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=d2dd0f98-6891-4bba-9856-c84d4a68427c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:f1:ad:55:8b:bc:a4:7e:74:18:1d:cf:6d:
                    d8:18:4b:5a:3a:96:a7:28:66:65:8f:01:3a:32:57:
                    08:6c:40:6a:53:cc:24:aa:7a:88:28:93:6f:95:63:
                    89:57:0c:90:79:6a:a6:d1:47:34:ff:bc:1e:bc:32:
                    75:31:38:44:fe:49:5d:c5:ef:67:27:18:b4:08:20:
                    4d:bb:a9:66:1d:74:31:47:70:e0:31:92:ca:bc:12:
                    7e:d1:d5:e8:eb:43:6a:e1:1c:3a:65:f7:91:0d:2b:
                    50:f1:31:7f:8a:65:08:fa:c4:ec:b9:4d:39:7e:9d:
                    f7:a5:f2:40:b4:ed:80:50:7f:a5:91:c2:29:54:59:
                    3e:cb:5f:06:2f:e7:e7:c2:50:85:3a:77:80:83:43:
                    88:b1:bd:ab:54:ca:86:6f:0b:52:3f:2f:11:79:a3:
                    2c:0b:c5:9a:77:28:12:66:fc:37:12:bd:7f:82:00:
                    e4:ec:0d:84:22:5c:00:6c:ab:69:43:05:01:e8:67:
                    04:1f:6c:f5:a0:be:de:e6:29:56:39:2a:84:31:02:
                    39:a9:d1:7f:bf:90:c4:6c:6f:4e:b0:ca:4a:5e:45:
                    aa:ec:a6:28:c2:44:80:2d:9d:f1:e4:8c:9a:13:7e:
                    09:4c:76:52:78:9c:4a:46:13:d9:3f:5e:de:eb:83:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:04:16:0F:9B:FC:07:74:92:1E:F2:70:63:B2:D4:B5:2F:86:30:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl

            X509v3 Authority Key Identifier:
                keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:af:a2:35:a9:05:7f:f8:13:0f:40:f0:90:28:df:a0:db:
         e6:2f:8a:6c:a7:89:3b:f5:1f:a8:61:99:a6:c3:40:f8:29:d5:
         28:2a:6f:b1:d8:ee:0d:b4:72:f5:5d:39:7b:7a:52:a9:8f:6e:
         2a:22:43:45:4f:0b:4b:74:4c:f0:83:b8:4f:9b:80:6f:c1:d9:
         20:02:22:c9:9d:23:7a:5a:e9:ca:39:f4:9d:42:87:d9:78:81:
         a5:9d:d9:e4:18:f1:55:50:8e:da:0b:a5:aa:b0:31:b6:02:e3:
         10:01:69:09:35:e5:af:85:50:fb:88:e9:c8:45:62:dd:9d:cd:
         27:b8:94:f0:a3:30:f0:64:4a:8d:e5:0a:2a:37:e0:52:00:7a:
         ba:14:b5:94:6a:80:73:2a:07:4f:be:9f:3c:a6:ce:1f:0d:ec:
         99:29:dc:bd:26:45:5f:5e:0a:f3:dc:1b:c1:34:96:47:7d:83:
         2f:95:ef:b6:e7:7e:e0:25:fd:6b:9a:ce:1e:6c:69:5d:79:a9:
         1c:9c:07:05:74:7a:c2:4b:c5:ce:5d:98:b7:d9:7d:8f:03:c8:
         b6:87:cb:08:d9:86:d2:7b:c2:23:14:e8:33:a8:b1:5c:b5:b7:
         6b:77:f8:7d:58:a8:8c:ce:ae:e2:7a:74:d0:b1:f7:5f:17:8a:
         d6:d1:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:00 2024 by rpki-client on console-fra.rpki-client.org