Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa
File:                     882df34c-1b20-34da-83f4-366df221bb54.roa (raw, json)
Hash identifier:          QnPPHJng63gNyiaT+DLByCq9BxFnT3zYpT7SD6IFC4k=
Subject key identifier:   F7:69:2D:72:14:F9:4C:43:30:3A:4B:08:32:C4:BF:71:D6:A5:52:30
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F432858479AABEE71EA3F5CCFEB0FAA40
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     852
IP address blocks:        139.173.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ee:71:ea:3f:5c:cf:eb:0f:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=0a1ce2db-675c-4943-a11d-c3371d39bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:57:c9:52:25:4a:72:d2:57:25:42:17:21:
                    c4:b9:00:3f:eb:ba:63:fc:68:41:87:84:e8:9c:6b:
                    a2:ff:14:92:60:25:f5:7a:4c:0b:70:9a:29:a5:57:
                    e0:4e:18:14:36:9e:48:b9:19:96:28:5b:9d:cc:53:
                    8c:6a:95:c8:f0:c7:e3:68:fa:b4:ef:2c:eb:f9:1d:
                    a7:35:23:c2:7f:b8:29:86:be:0a:0d:df:57:e4:5b:
                    36:64:02:b7:39:af:20:cd:e5:be:ea:37:06:3e:9b:
                    99:9d:14:6f:94:b9:dd:7f:4a:91:17:53:85:0d:c9:
                    39:26:12:b1:6f:a5:3a:d3:84:79:3f:b1:24:79:94:
                    d3:77:f6:58:82:5a:3c:27:c4:21:cc:5b:ef:70:6b:
                    6d:f4:f1:b2:e6:fb:97:c8:96:bf:0e:c4:2e:51:bd:
                    c5:01:63:b0:ec:7c:5c:06:cb:42:99:de:7f:e4:3c:
                    10:c1:c8:b5:d5:75:eb:c9:8d:06:d9:fd:46:94:94:
                    76:c7:6a:db:9b:4a:8c:52:ab:16:7c:6e:94:af:dd:
                    bd:f4:77:d1:1b:a8:93:a4:f8:a4:13:3d:e0:a3:47:
                    7b:ae:ec:38:34:2c:52:cd:92:f4:1a:e5:72:cc:b0:
                    e7:fc:54:94:16:41:7b:93:08:c5:68:4b:ea:80:8d:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:2D:72:14:F9:4C:43:30:3A:4B:08:32:C4:BF:71:D6:A5:52:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:17:bd:01:14:cf:19:88:77:dd:b3:5e:7f:25:f8:d1:09:
         56:c1:5b:17:71:50:38:f2:83:58:0b:62:e9:5f:14:72:f9:50:
         79:ef:dc:b1:75:cb:37:e8:fd:be:83:63:3a:cc:70:cb:e3:55:
         ea:04:5e:21:a0:7d:c5:46:e9:2b:81:76:b6:bd:9e:c4:c8:99:
         8c:2e:5d:ca:56:cd:6f:4d:f2:8e:8b:17:be:22:8a:d9:37:92:
         3f:41:6e:3f:51:7a:de:d1:2a:6d:76:af:79:b9:21:7f:be:a9:
         e7:a2:02:2b:5c:88:c8:26:c1:91:36:60:9e:0c:96:46:e1:c7:
         ce:7c:9b:c5:ed:88:b4:0a:64:e3:ad:ce:dd:73:c9:86:d9:6a:
         0c:b3:68:d2:ca:c1:0e:cd:c4:69:53:f9:99:1a:65:e2:a0:30:
         f5:bc:24:c7:ce:89:78:fa:7f:dd:be:5e:46:61:48:bb:04:39:
         3c:f2:58:2a:0d:6c:e2:65:23:f4:9d:90:34:5b:22:bb:9a:52:
         55:68:5f:88:db:2f:f1:26:18:c9:af:0f:52:d4:1c:57:0a:58:
         5b:26:c6:85:47:68:f9:5b:b1:c5:be:c8:e0:02:d2:9d:b6:2f:
         2b:dd:df:bf:d9:e0:9b:1d:fd:77:17:47:ee:a5:6e:bb:cd:65:
         02:b2:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org