Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f00367-aeb9-32b9-ac7d-538e30c64e8d.roa
File:                     00f00367-aeb9-32b9-ac7d-538e30c64e8d.roa (raw, json)
Hash identifier:          PUwbhg21DSnvR2+qDbGHzWRydWsKEuoTpu8RUxolnEI=
Subject key identifier:   27:6C:6E:9D:3A:F5:51:DD:C5:1A:CF:4D:2C:6A:0B:72:5C:65:AE:26
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB62AED3743DB193B63620
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f00367-aeb9-32b9-ac7d-538e30c64e8d.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     33321
IP address blocks:        209.124.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:62:ae:d3:74:3d:b1:93:b6:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=86c63b0b-32b2-48f5-a294-12ddd55f0e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:06:98:d6:8c:9c:8d:3c:51:7a:00:b6:b6:
                    2f:ce:73:66:97:53:04:c1:e7:19:1e:2a:0b:2e:a7:
                    6f:b4:8b:f9:58:0b:34:90:ad:23:89:2d:cb:aa:7c:
                    cf:1d:22:6a:30:bd:45:27:07:d3:2c:de:10:9c:9e:
                    20:40:72:3c:10:88:f6:ca:dd:83:80:07:9b:8c:2c:
                    89:2f:d0:8a:66:7b:33:17:3b:a2:90:9c:66:c0:5e:
                    06:68:f1:26:2a:0f:cd:17:6c:c1:64:85:ea:20:e3:
                    30:17:44:d9:6f:7c:8a:20:90:09:66:dd:7d:fe:ea:
                    79:fb:e6:bd:55:a1:98:e7:a8:76:19:85:da:4a:56:
                    e4:ee:93:4d:f7:41:a2:af:d8:ae:b7:5d:84:3b:49:
                    ae:f9:9f:d6:ba:37:d0:87:a8:d6:a4:e3:c1:8b:07:
                    fa:a5:df:5e:90:35:67:fe:07:bd:a4:ad:84:98:8f:
                    8c:29:8c:92:f6:78:63:4d:9e:79:f7:1b:66:7c:81:
                    d7:e4:4b:47:1c:c4:79:2f:9d:05:a1:d8:31:f5:4a:
                    27:d3:ba:ff:0f:7e:58:0d:62:95:15:9f:1a:0b:1e:
                    55:53:11:77:91:08:71:93:ea:48:60:c7:ba:a0:ea:
                    3d:86:4d:a5:87:78:7a:d0:46:68:fa:5d:7a:73:c1:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:6E:9D:3A:F5:51:DD:C5:1A:CF:4D:2C:6A:0B:72:5C:65:AE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f00367-aeb9-32b9-ac7d-538e30c64e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:2e:59:28:bc:7a:0d:d0:67:b2:5c:ac:1f:cc:41:3e:ba:f8:
         41:70:d7:98:5c:e0:55:2c:35:a3:0e:8b:ca:2c:4a:38:f5:aa:
         fb:c6:ac:64:59:46:c2:d9:5c:8e:f9:54:55:9c:db:e2:67:5a:
         87:24:ea:fe:7c:b3:7d:53:fb:60:be:11:12:f8:a9:13:8d:cc:
         4d:46:e5:1e:55:66:fa:02:62:c4:a6:70:95:aa:b2:69:14:82:
         d5:30:4e:b2:1a:b9:89:af:52:31:e8:fb:01:fd:34:4d:55:20:
         ae:ef:1e:7f:30:f8:a1:ad:6d:55:54:b2:ca:aa:f4:bd:94:67:
         a9:93:fc:32:e8:6b:16:d9:31:9f:d9:ed:40:2f:4f:f6:f2:40:
         91:de:97:e6:de:82:03:60:c8:d8:27:1d:a7:82:b5:df:26:db:
         b8:0d:42:23:88:9e:c9:72:13:b0:37:70:e2:c8:dc:ee:84:c0:
         26:3c:f1:f9:6b:88:98:40:a3:70:67:22:83:99:e1:b2:5d:37:
         b0:99:ba:0a:d2:54:fa:a7:aa:1c:69:73:f6:14:5f:96:a0:e3:
         21:9c:ff:a9:54:86:97:fd:6c:f7:a3:ba:a0:c8:57:cf:06:52:
         55:8b:b3:99:69:bc:c3:70:9a:82:ed:a2:1b:2e:85:ac:fb:76:
         08:8e:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:46 2024 by rpki-client on console-ams.rpki-client.org