Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa
File:                     b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa (raw, json)
Hash identifier:          mZqdwiap93NQV8DcWmEC/jPrpJcrpTagoglMeuoj2rY=
Subject key identifier:   39:E1:3C:E9:61:E9:C3:F8:F3:B1:0F:29:44:F6:EA:F6:E2:BB:F8:16
Certificate issuer:       /CN=24b82191-9eab-4780-afd2-8d7640123b59
Certificate serial:       010D0C9F43285847D999F6D469C7FCC91B7DB340
Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     32799
IP address blocks:        172.83.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f6:d4:69:c7:fc:c9:1b:7d:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=88467747-b73f-49fc-b915-43e4aea74183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:92:35:68:80:34:45:78:c9:38:54:50:09:
                    a8:79:c5:1d:87:3d:b6:97:ad:1a:6b:b1:e8:41:d1:
                    6a:14:73:7e:8c:65:04:f8:20:98:e8:49:e0:a1:54:
                    29:1d:83:b5:e6:b7:47:06:e3:e2:fe:51:88:9c:75:
                    9d:35:19:c1:51:7d:b2:1d:89:54:d3:c3:9f:dc:11:
                    1a:fc:28:d0:ed:4c:cf:d0:48:70:29:82:5c:d4:ac:
                    56:19:fb:4b:1e:b1:82:4f:c7:bb:94:6f:79:9e:ca:
                    9d:dc:34:37:ec:5e:98:b3:45:5b:db:23:c9:1e:e8:
                    3d:90:0a:93:89:4b:e7:cc:99:69:8e:0f:e6:67:b1:
                    b5:78:32:10:1a:59:59:4f:3b:90:0a:ee:77:7f:ff:
                    3d:da:52:82:82:f0:c9:19:42:e2:1d:25:2e:f8:d8:
                    6f:6c:76:02:2a:db:96:46:bd:e4:9c:28:2d:05:87:
                    9a:11:12:ac:a6:ff:29:ef:22:a1:29:cd:e5:77:59:
                    ec:cb:09:bf:5c:e3:f1:b0:bb:75:96:5b:3d:54:17:
                    59:f0:bf:7a:c7:ab:8a:ad:e0:1a:1c:e5:7f:b9:df:
                    32:2b:de:04:fe:89:ae:16:5b:58:7e:3f:53:72:f4:
                    7e:63:63:54:04:5c:87:50:f5:c7:e9:89:65:93:44:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:3C:E9:61:E9:C3:F8:F3:B1:0F:29:44:F6:EA:F6:E2:BB:F8:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:b6:82:e6:db:c7:19:8f:eb:08:90:57:48:82:84:d3:60:
         43:c3:94:20:ba:d9:ed:7b:60:e2:e2:f8:2e:37:25:27:3c:ec:
         0f:2c:51:58:30:b3:92:cb:49:73:94:90:57:40:02:59:9a:1b:
         06:14:58:72:aa:b7:b2:5c:c4:6e:cd:49:0a:a1:55:1b:82:8c:
         52:a8:2a:04:46:e3:32:19:d2:d9:00:97:dc:25:fb:fc:9b:12:
         82:e0:70:6d:6a:46:f9:c1:49:a0:b8:3d:31:63:d4:89:6b:84:
         4a:2d:eb:5f:ba:90:28:11:9e:05:0c:a7:f0:70:71:00:5c:46:
         34:d0:9d:0e:eb:c7:f8:ec:ff:f7:ba:94:06:b7:83:6c:14:6c:
         03:c1:ef:37:fe:ba:d4:89:07:8f:62:06:af:f3:f1:0b:2b:4a:
         62:67:1d:8e:79:6a:1e:df:37:6d:fa:ed:e9:3a:54:2e:d2:df:
         6e:72:b4:fe:83:87:9b:06:96:f8:2e:a5:36:ff:b8:3d:d5:d4:
         c5:14:88:6f:c3:08:8c:4a:a6:7e:21:be:d2:3f:72:67:43:c4:
         de:8a:48:18:40:c1:ed:d0:da:ff:14:3d:56:a0:ff:cd:06:fb:
         19:cd:5f:0c:d7:f1:31:42:e3:3d:b5:86:b9:c6:e0:2c:be:09:
         ec:b7:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:38 2024 by rpki-client on console-fra.rpki-client.org