Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa
File:                     678a1903-456b-3e46-aecb-edfc725741eb.roa (raw, json)
Hash identifier:          tPmbVoW/jJmLJ/iXsoQCXzxTdwFlj21tSLJC6iHAORo=
Subject key identifier:   05:00:1A:30:09:85:85:4F:BC:DA:14:0C:12:50:80:6B:14:17:E9:B4
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F432858478CB682A9264D0CCEAC3655A0
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     88
IP address blocks:        128.112.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:82:a9:26:4d:0c:ce:ac:36:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=09d09a51-6130-4c54-a494-3ce522bd1b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:0e:76:b8:de:ce:b3:f3:1c:ba:09:25:6a:
                    d1:f5:28:1d:cc:36:cc:30:37:62:30:3f:19:e7:56:
                    78:3b:64:cb:1f:26:b6:9a:83:8b:4f:c4:65:cd:d6:
                    dd:b0:8a:15:d7:5c:98:4f:d4:1f:3e:2c:24:93:f3:
                    71:fb:93:51:45:e6:3c:74:09:67:96:bb:8b:c7:69:
                    0e:a0:9a:7f:9c:01:8d:81:df:13:b2:6f:da:99:39:
                    0e:25:86:aa:34:1e:1f:73:fc:6d:b7:30:95:14:2d:
                    4f:da:55:6a:59:d5:0b:22:31:8d:06:e2:58:94:c4:
                    8c:90:a4:36:b9:28:fa:d5:8b:90:e7:06:ad:3f:15:
                    66:ff:21:87:72:91:5e:ee:96:85:e1:b6:31:58:a2:
                    41:8c:83:5b:76:7b:23:cf:e7:c2:7f:e6:5c:8f:72:
                    75:5c:f1:64:b6:c8:7c:54:79:c3:ed:7c:1a:8e:3e:
                    42:b5:f6:63:77:12:71:1c:46:e9:be:cd:6d:f4:74:
                    2f:0e:e0:ae:4c:c0:12:52:91:48:fe:ab:dc:69:dc:
                    0f:da:92:15:e6:0d:48:79:9d:d7:d6:7d:90:dd:1d:
                    e0:1c:1d:c6:36:41:bd:c3:95:1a:0a:24:a4:51:86:
                    30:06:a9:8e:c5:68:99:58:0b:06:8e:78:81:34:2f:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:00:1A:30:09:85:85:4F:BC:DA:14:0C:12:50:80:6B:14:17:E9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:7f:c8:55:81:be:83:29:b4:83:c6:b4:58:af:a2:c3:b1:
         44:82:76:5c:b3:9a:c8:6c:f7:e5:4a:dd:34:fa:da:7b:70:0a:
         c1:f0:fe:c1:51:08:04:7e:ec:27:7c:49:65:0d:d7:6b:19:a5:
         32:a7:fd:fd:3f:4d:96:71:b0:10:b8:7a:12:c3:c9:81:1e:ec:
         8d:bf:6f:9f:2d:b1:cc:bb:69:0d:8c:5c:4f:6c:7e:3e:1d:dd:
         1d:c8:9e:50:4a:d6:5a:a5:32:a6:e8:dc:57:ad:01:d9:ce:b5:
         f2:24:bb:4f:10:43:c4:da:40:bc:08:44:5c:7f:ef:04:cf:1e:
         6c:d1:54:52:9d:5f:85:00:d5:0c:62:4e:da:ad:53:96:03:27:
         1a:05:4a:04:6f:be:f2:80:b1:6d:44:f7:d3:e8:bd:2e:3e:58:
         01:07:3c:65:60:58:a9:66:26:6d:05:ab:de:a8:5d:19:1b:47:
         f7:7c:dd:d0:42:2b:f3:ec:7e:c6:68:e7:c2:7c:48:43:0f:e6:
         95:36:9a:9e:78:9d:4f:04:4f:9c:81:9d:86:e1:89:ae:eb:86:
         a8:2e:36:7c:86:d5:42:c1:69:53:9d:df:7a:ce:ae:a2:82:fe:
         f5:b6:49:2a:fa:9b:0f:35:84:a5:88:49:44:6f:db:05:59:7b:
         68:1c:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:00:49 2024 by rpki-client on console-fra.rpki-client.org