Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
File:                     90308f7e-154a-30dc-9271-d2453cae8834.roa (raw, json)
Hash identifier:          pQgPEbR6bSzFi1RGiqZ2uEIvSUPaH501NEKoa8fdPOU=
Subject key identifier:   31:68:95:86:D8:3D:4C:4D:76:32:FD:1B:5C:4B:05:DE:10:81:2E:D6
Certificate issuer:       /CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
Certificate serial:       010D0C9F4328584754E0E90AF52AFC8278E56240
Authority key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     31748
IP address blocks:        149.112.8.0/24 maxlen: 24
                          2001:504:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e9:0a:f5:2a:fc:82:78:e5:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c99fa4f5-91a2-420a-8c9c-4200c236cadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:21:4b:f1:73:77:35:80:a8:3c:b6:3e:95:
                    c0:56:b6:90:63:75:42:ab:b7:51:e9:b9:42:6d:9c:
                    eb:2e:69:d1:b6:ad:39:6a:4c:45:5e:05:81:b1:af:
                    6a:3f:a9:4c:0e:15:25:81:51:af:df:a3:f4:5e:c7:
                    52:5f:39:a7:76:6b:09:d8:a8:a8:e1:cc:6f:b4:78:
                    ea:16:e5:c7:9f:66:85:95:46:8b:1a:8d:84:39:15:
                    93:a6:74:e5:bd:de:71:8b:3c:81:bf:46:c9:9f:b2:
                    21:1b:ad:b9:da:1d:d7:05:b9:41:05:b4:ad:76:b5:
                    6c:f3:95:7a:c1:1e:45:69:8b:5d:9c:13:d4:25:25:
                    70:82:38:cb:14:25:59:b6:4d:28:52:6b:a6:e5:79:
                    7c:66:60:d2:ca:b9:67:09:7f:3f:40:7d:d4:94:4c:
                    f1:15:ef:1e:54:20:6a:c6:21:b6:71:f5:c4:6f:e9:
                    d8:3d:cd:4b:28:a0:52:69:6b:53:c4:26:bc:f0:95:
                    d0:cc:54:a9:65:4d:d6:fc:8a:17:4c:ec:26:93:11:
                    b7:0b:c0:8c:3a:57:54:cc:20:01:fb:77:c2:cb:79:
                    c2:64:6d:fa:53:c6:2e:68:c1:c4:30:99:27:7b:c7:
                    20:32:28:7e:47:1c:c3:18:f4:35:79:f4:de:c3:d2:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:95:86:D8:3D:4C:4D:76:32:FD:1B:5C:4B:05:DE:10:81:2E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl

            X509v3 Authority Key Identifier:
                keyid:55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.8.0/24
                IPv6:
                  2001:504:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:72:e4:7f:9f:7e:a8:5a:ef:be:db:08:20:c7:0c:b2:57:
         37:b4:ab:42:ec:31:5b:a9:c2:a2:61:15:fd:de:d3:c7:8d:00:
         d5:7e:92:8f:8c:a1:30:b6:44:5b:0e:6b:12:f6:f2:e5:dd:49:
         2b:4f:23:4d:38:46:94:8a:95:0f:16:33:d3:86:32:fa:d9:fe:
         ab:52:28:60:0c:95:46:9e:ad:7d:0e:ef:92:a9:9d:c7:f8:43:
         34:bb:b2:55:21:c0:ed:dc:85:50:76:2d:b0:18:c3:38:94:9c:
         1d:fb:04:18:4a:72:42:ed:3f:1e:45:95:e2:a3:52:20:e8:e5:
         20:ed:57:ea:bf:5f:3d:6e:e8:88:05:cf:06:b4:d2:f3:0f:48:
         29:0b:2f:00:4a:64:a3:80:55:48:6d:91:85:89:39:80:ff:1f:
         cf:d1:82:5e:a6:63:fa:d0:06:89:32:26:d0:da:0f:e8:dd:5f:
         c7:b0:e1:b2:f9:61:f7:bc:88:0b:eb:d3:6f:d0:67:8e:d2:09:
         78:9f:58:c6:1c:dd:b3:1f:ef:65:c8:c2:b8:90:fe:52:2e:72:
         10:94:05:3b:cb:9f:c9:74:fb:84:93:e5:b0:1c:22:57:49:33:
         07:42:74:35:ff:93:ec:29:dd:3c:ad:76:18:6e:e3:71:bc:57:
         ed:ab:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org