Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
File:                     17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json)
Hash identifier:          ie5bo34Wk0ycAoFjtyHYb/rql9Xc1xeo97gvb24m2Jg=
Subject key identifier:   B5:99:5C:31:BB:DA:E9:83:58:8F:4A:C8:5B:DE:6C:8D:79:84:5B:70
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6904B372AF1BE61A45280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        174.137.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:4b:37:2a:f1:be:61:a4:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=f2e0cf7c-010e-456f-bc5e-c456aedfd34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:14:25:52:ac:89:4d:71:19:90:9f:43:cf:
                    e1:82:27:20:81:98:aa:0f:0a:ee:15:50:23:20:de:
                    a8:d2:d2:83:77:d9:69:96:fa:af:01:0f:bd:dd:6c:
                    a6:cd:6d:e4:57:a1:59:9b:62:3b:d9:af:c4:ae:b4:
                    6e:5b:da:be:d3:45:e5:28:24:3f:50:9d:04:1b:51:
                    4d:a3:97:b7:a9:ab:f9:92:be:58:8d:c4:ba:6c:db:
                    84:26:fe:7e:19:0c:57:23:cd:c3:6b:f5:de:cc:6c:
                    7c:67:5b:c6:9a:6e:0a:4c:7a:af:ad:fe:b0:dc:0e:
                    4b:a1:ca:51:78:d1:df:63:31:0e:89:82:e3:e4:dd:
                    93:a8:90:93:2b:a3:67:22:28:a0:52:db:e8:5c:50:
                    28:5c:7a:79:65:6d:d4:1b:91:d0:ad:c3:21:b3:be:
                    5d:b5:ff:ca:1a:ab:7a:9f:92:29:c2:ac:64:1f:a0:
                    e3:c9:a9:c1:1f:2e:ac:a5:22:e5:24:4c:42:5b:4b:
                    7b:ac:26:36:6e:02:af:b6:3c:0f:6c:55:5b:f4:e1:
                    4e:8c:f4:04:67:7f:d2:d9:d1:4a:58:1f:af:6e:2c:
                    4b:d9:19:62:9a:5e:99:0b:3f:e5:77:94:b0:85:d6:
                    cd:e8:ee:d2:82:67:77:dd:dc:c0:5d:5a:b0:21:0c:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:5C:31:BB:DA:E9:83:58:8F:4A:C8:5B:DE:6C:8D:79:84:5B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:23:6a:ef:b6:f2:4e:11:58:46:39:ab:0d:b1:67:90:69:
         4e:3d:0a:b7:c5:8e:d4:2a:e2:8e:ed:df:be:30:74:48:88:ba:
         98:11:69:25:1e:32:b3:f6:46:24:43:a9:ea:fc:d6:a8:92:60:
         7d:49:4e:1b:a1:2f:46:95:0b:4f:9b:03:17:aa:a1:b1:7b:3c:
         8e:e3:4b:ad:93:5c:d9:68:23:3f:e7:b8:2a:cf:ad:d7:4f:b8:
         6c:a7:26:9a:32:7b:12:25:b7:73:e1:8a:98:c2:fd:ec:34:fa:
         b0:bd:7b:20:b4:f8:45:f7:5c:08:4a:ef:3b:ae:ed:25:1c:ce:
         f3:39:05:1e:03:6d:54:00:00:ef:5d:7d:f1:e2:55:dc:a7:f2:
         e6:8b:eb:d3:a8:16:26:12:5a:b9:33:7e:b1:e2:75:1f:b6:30:
         5a:aa:be:35:56:61:b3:8e:28:b5:a2:70:de:02:54:e2:49:30:
         16:92:4d:d3:15:0a:7a:90:22:81:50:f1:01:5a:75:b2:09:d1:
         3f:08:d4:4c:b3:a7:0e:8f:7c:d0:8a:1c:09:aa:88:69:67:23:
         3e:fb:b0:57:65:c0:dc:82:64:14:ec:af:06:3c:a5:b1:11:d8:
         e7:2d:85:1c:56:be:8f:ce:bf:d5:bf:40:b1:3e:c9:8e:58:df:
         b2:1b:c5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org