Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
File:                     e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa (raw, json)
Hash identifier:          mVYDj/kG+VxqnzX/jMtbJrQdu+otrPPg7EmrF6LGa54=
Subject key identifier:   F0:33:DE:4D:C3:E7:A7:81:EE:DF:9B:80:5F:82:23:20:5F:76:93:7F
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8D321E25AE24CD9CE1C0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     33695
IP address blocks:        173.237.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8d:32:1e:25:ae:24:cd:9c:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=f3e0149c-2e91-4b30-ab2f-260fb5ec92f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:c7:82:51:16:c8:11:a7:5e:4a:03:e5:bb:
                    26:93:4c:d6:50:87:ef:03:11:2d:ec:06:b1:b2:84:
                    28:ff:63:cb:af:e4:b3:dc:18:ef:2e:e8:50:6b:e9:
                    88:c1:a7:a9:74:ff:54:3b:23:43:a5:47:91:e1:84:
                    bb:67:e7:32:b8:90:60:e8:44:46:d7:d2:0c:9f:80:
                    4e:fa:2d:4f:42:da:8a:5f:57:6f:c5:26:1f:11:5f:
                    7d:c8:d2:22:6e:e1:54:b3:63:5a:6e:37:84:10:fe:
                    93:54:57:d6:bf:e9:64:07:13:fb:64:c2:ef:a8:d0:
                    36:34:bb:80:bd:78:89:35:14:3f:30:1a:af:1c:75:
                    10:e9:5d:20:f1:4c:ad:e1:b0:ff:e3:69:7e:75:d5:
                    f0:c8:2e:cb:38:67:49:45:77:99:9c:ab:c8:ec:82:
                    a8:9c:c7:be:75:94:6a:11:b7:8b:66:79:d9:de:10:
                    98:0b:16:6b:85:23:12:d7:5d:ce:38:f9:8f:8a:66:
                    ef:b8:71:ee:86:35:33:38:f1:7e:b3:e0:38:6f:18:
                    e3:5d:c8:b2:6e:b1:c0:9f:10:54:63:bd:3e:9c:9d:
                    7c:1a:c9:c4:a6:bd:f7:ad:e0:b0:dc:3f:be:87:0f:
                    ec:c7:7a:60:11:9d:ba:5b:ec:f8:4e:72:43:04:f5:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:DE:4D:C3:E7:A7:81:EE:DF:9B:80:5F:82:23:20:5F:76:93:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:b4:d5:fe:30:84:17:ab:44:e2:38:fb:d2:25:e7:20:ca:
         18:dd:76:85:ed:54:f4:92:e1:54:6b:c9:24:96:73:b8:c5:bd:
         96:03:10:ac:da:3b:23:41:d8:fb:11:e4:73:8e:07:a5:80:be:
         a8:59:51:c6:2f:0f:cf:a2:51:db:1c:98:1b:d0:e4:91:41:73:
         35:63:18:e0:d2:06:73:48:ae:00:99:36:e5:84:48:d9:2d:e6:
         11:11:e5:af:5d:4f:e1:9b:f4:9c:ce:d5:88:ea:e9:cf:a7:cb:
         f5:e0:7d:d9:2d:cb:c4:39:d4:ab:79:55:66:1e:75:31:90:c0:
         eb:11:2e:af:a6:7c:0a:e0:ee:61:16:67:22:56:6d:b8:b6:e3:
         9a:1d:8c:e1:52:b3:c3:50:db:5d:77:01:26:2b:3d:70:e0:ba:
         7e:32:d0:da:26:b6:e5:86:9d:4d:70:5d:d8:71:e3:c2:1b:fc:
         da:4e:cf:67:2b:be:3e:00:24:5d:ae:eb:29:e7:b1:fd:30:2b:
         9a:e9:16:47:63:84:5f:07:bf:cb:f0:55:bd:84:75:0c:38:03:
         5d:7d:1a:ac:e8:9f:51:6f:f1:d4:9e:a7:8a:1f:de:07:34:83:
         fc:de:f9:61:65:2a:3f:b8:df:ed:83:21:99:4c:74:99:c8:34:
         36:3d:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org