Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
File:                     9cc6b592-366f-3a26-87a5-415ed1867edd.roa (raw, json)
Hash identifier:          sJWLudzNTxM43MTKdH7HCxeg/Diz+Es6e8eXUsBjQIw=
Subject key identifier:   D2:BF:FC:07:0B:F8:ED:8E:78:72:84:DB:19:D3:B5:D4:C2:B5:11:82
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8D63797FDB22BD086980
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     36352
IP address blocks:        72.249.94.0/24 maxlen: 24
                          72.249.124.0/24 maxlen: 24
                          206.123.95.0/24 maxlen: 24
                          207.210.239.0/24 maxlen: 24
                          207.210.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8d:63:79:7f:db:22:bd:08:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=2002ee43-3c67-4c6c-8bdb-0a1b97386a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:f6:b2:3f:76:f6:26:65:b2:d4:4f:91:7d:
                    b9:60:89:5b:4f:90:5a:b0:1b:b5:8f:70:69:df:eb:
                    b5:d7:ea:f5:f6:c5:a1:3e:fe:31:61:bf:21:be:40:
                    fa:f2:92:f0:52:9f:28:70:d4:2d:70:e7:5f:31:f5:
                    09:21:54:e0:d3:89:19:34:36:f6:ab:4e:65:c4:5f:
                    2d:3f:dc:84:28:04:bd:23:0c:ff:ed:6a:ba:3d:59:
                    72:25:bb:96:47:46:16:f4:f6:f0:3b:3f:5d:d5:42:
                    8c:3f:d6:fc:7a:e6:83:da:5c:46:82:c0:28:7b:5b:
                    c9:4f:e6:b7:8a:0d:48:20:7a:d5:fa:a6:6b:d4:1d:
                    dc:b3:80:b2:0e:f9:99:e5:3f:3d:a6:01:5b:78:57:
                    51:d6:f0:36:f6:b3:1d:44:87:68:8a:89:af:27:cf:
                    c2:dd:37:f0:f3:8a:b3:c9:c7:ef:74:72:8f:fb:ac:
                    92:c1:be:cb:fa:0f:32:05:88:1b:92:36:61:79:99:
                    a7:70:cf:53:13:2e:33:47:7f:45:af:8b:d9:51:d8:
                    d0:47:2a:e3:c4:0b:77:24:9a:f1:c0:f5:37:c0:fd:
                    32:5e:42:52:09:f0:41:6e:fc:3d:45:1b:5e:72:af:
                    e4:75:5c:42:8e:7e:55:77:9a:29:0e:aa:89:b2:6a:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BF:FC:07:0B:F8:ED:8E:78:72:84:DB:19:D3:B5:D4:C2:B5:11:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.94.0/24
                  72.249.124.0/24
                  206.123.95.0/24
                  207.210.239.0/24
                  207.210.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:0c:95:20:87:fa:02:9c:e2:ab:8b:36:c0:b8:3a:8f:d7:
         b8:cf:67:d1:2e:07:3b:93:a4:29:0c:b3:48:ba:7d:12:01:f1:
         df:3c:0a:2a:80:e4:12:f1:ca:3c:d4:6a:9e:34:6a:31:76:e1:
         e7:00:f7:66:3b:2b:dc:6e:22:e5:d0:0c:1e:b3:e3:a4:96:79:
         f4:3e:95:4d:ef:76:d5:93:41:c3:27:0b:61:2d:99:5e:cd:60:
         5f:7a:be:8c:3f:27:03:af:eb:ed:04:33:17:81:c5:37:ac:8b:
         23:3a:95:2e:99:b4:a0:48:de:64:a6:99:31:e0:60:f0:2f:6c:
         6f:d5:fe:6c:5a:f6:33:3d:ce:eb:f0:64:c8:f2:43:d1:54:d5:
         6b:ae:52:ac:22:da:5d:bf:70:e8:9a:c2:dc:e6:6d:dc:4e:b4:
         b7:76:95:b8:75:76:42:4f:d6:6a:7f:7d:89:75:5d:37:16:65:
         85:ef:16:5a:c1:50:d8:c9:58:61:8a:e7:b0:3b:9d:d2:86:01:
         dc:7b:a8:08:d0:8b:fe:e7:5d:5b:bf:78:f6:1a:78:0e:94:07:
         ba:c3:f9:33:79:bb:b2:2d:fd:16:a8:ab:42:b3:7e:bc:2d:db:
         e7:ad:11:0c:b4:ce:ea:f2:ab:ea:07:a5:d1:59:6e:78:bc:6c:
         ec:68:eb:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:12 2024 by rpki-client on console-ams.rpki-client.org