Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa
File:                     3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa (raw, json)
Hash identifier:          P5cbsizxafqwLvVRsEs9t/ukLlv9JDNYdr0qpdI6sPQ=
Subject key identifier:   57:D8:A2:30:71:D7:C3:87:4C:5A:1F:E1:5E:DC:83:88:39:EC:5A:BF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FA68E6EB69992A2EF300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     10790
IP address blocks:        128.177.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fa:68:e6:eb:69:99:2a:2e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=7dd081af-31a8-42c6-9ae0-213b46649d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:7f:da:6b:4a:95:04:27:cd:f4:c6:d4:8e:
                    27:a4:10:a7:1e:26:bc:8a:0b:04:02:ec:98:3f:ee:
                    9d:21:4a:82:9e:73:8e:17:41:3b:7b:94:68:07:ba:
                    7f:64:0d:68:4e:b5:44:70:7d:4f:59:98:14:c6:f4:
                    34:ff:15:03:c2:ac:be:4d:e2:14:52:e5:a2:11:e5:
                    7b:c6:41:36:c9:a2:96:f3:d6:ba:61:6e:91:82:e8:
                    1f:ec:68:67:87:1f:c0:03:0b:49:d2:95:c8:d0:76:
                    f5:c8:41:3b:22:36:9a:69:8c:94:60:07:5b:c8:8b:
                    fc:27:9f:77:d3:7c:aa:5a:bd:79:4a:db:d3:30:91:
                    32:ca:c8:48:4f:a9:6d:47:22:a8:46:69:4b:92:fa:
                    a4:42:28:bf:4c:55:ef:12:b8:24:43:8b:86:13:a8:
                    d8:78:56:eb:92:a5:f3:62:ee:b3:db:2c:c5:3e:c9:
                    e1:64:f2:c2:40:3d:c3:d9:48:09:ae:f2:fa:89:da:
                    7a:24:2b:64:62:28:e2:0c:41:5a:ce:60:a8:f8:37:
                    78:fe:56:31:db:a1:ea:10:89:c8:33:31:c6:b1:c1:
                    b5:2d:56:e0:88:45:a1:a8:df:e4:73:c7:79:d1:c2:
                    93:70:63:fd:41:e0:0f:b4:0e:26:49:b9:45:f9:a9:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:A2:30:71:D7:C3:87:4C:5A:1F:E1:5E:DC:83:88:39:EC:5A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:9d:c9:83:b7:56:28:71:58:91:f6:f7:c9:df:e2:bf:59:
         0b:ee:39:cd:2c:f0:b5:42:3d:80:26:4c:32:c7:f3:20:5d:0f:
         ad:25:70:83:c1:80:e5:6d:cf:cd:1e:6e:62:51:4a:11:4e:62:
         f5:b4:0c:3a:e4:cb:77:99:04:2d:b1:b5:4b:17:95:13:30:f4:
         d8:3e:4f:59:ec:b6:3f:63:ce:96:2c:95:14:c1:69:c3:59:e5:
         96:f1:4e:2b:40:6e:2a:18:a1:31:d6:1d:1d:38:dc:7a:61:09:
         ab:4e:5f:ff:3b:ff:80:5f:2b:2d:4c:29:c3:68:7a:13:a4:a0:
         26:86:5c:6c:d1:57:54:66:42:e1:64:95:f2:eb:fb:05:ea:3b:
         a4:bd:5a:0b:b6:58:6b:3b:61:d2:0e:1c:bf:78:8c:41:74:07:
         6e:5c:e6:2b:f3:57:8b:4b:b6:5e:52:ca:2d:bb:f7:39:66:48:
         be:69:4a:f5:dd:65:d2:7a:d0:37:f8:ff:0d:89:64:46:f8:3e:
         29:72:27:fe:24:fb:1c:ea:c3:bf:74:89:eb:87:f5:66:51:c1:
         1b:44:a3:a3:2b:2a:6d:a0:ec:93:ab:18:d3:cc:69:a7:de:1a:
         60:d1:f6:1c:b2:23:c2:5d:07:27:a1:93:41:57:b3:ed:07:1a:
         1b:1e:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:54 2024 by rpki-client on console-ams.rpki-client.org