Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa
File:                     99c19601-626b-308f-9eb2-1104f510554f.roa (raw, json)
Hash identifier:          s/iY6HG/9y1D4IZFpQwNZRrtGT6mWtAHmWLvNrypoRk=
Subject key identifier:   7F:E5:34:AB:96:C8:0D:E0:CC:35:E1:74:0F:98:86:76:62:0D:BE:D5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285847C344865AC1F8366FD9028140
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     53989
IP address blocks:        208.184.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:86:5a:c1:f8:36:6f:d9:02:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=955959e4-46bb-40f1-8faa-58a50ba58ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:82:a8:38:4b:a1:83:9e:da:ba:4d:35:c3:
                    85:af:d3:84:e2:e4:89:55:26:79:fd:c0:8d:cc:db:
                    d6:3e:8a:07:8d:99:a2:53:65:6c:58:f4:36:9f:96:
                    81:46:da:ea:6a:dc:30:a0:c5:f2:24:c9:a5:b1:7b:
                    05:f8:a6:9b:55:9a:5f:bf:c2:64:d5:11:4c:c2:15:
                    66:1b:b7:3a:d2:3f:29:9a:81:6e:bd:d6:b4:ae:1e:
                    37:d3:34:d3:d6:27:46:f9:a1:6a:3c:c9:0d:d6:4b:
                    94:d1:46:12:27:c3:a4:00:03:45:fb:2e:18:be:7e:
                    3e:d3:79:7d:45:0a:e6:14:40:2d:4f:40:8b:7d:2e:
                    58:e1:54:52:e3:57:a3:b4:47:41:8a:cc:20:38:bd:
                    bf:f4:5c:49:be:19:62:54:cc:c6:fe:64:29:d8:d4:
                    5c:23:49:8e:5a:08:17:8b:c9:e1:ef:e4:5d:34:e6:
                    55:ef:cd:01:d3:01:62:7b:89:48:e2:26:b9:b0:40:
                    32:71:0e:49:93:20:c2:c0:08:38:4c:06:a3:4f:08:
                    f1:37:99:fd:cf:c9:71:80:85:69:b9:3c:34:43:48:
                    1b:de:ae:b6:b8:ff:94:c4:ed:95:07:cc:ee:9a:d1:
                    1c:08:11:8b:6d:be:7b:e1:db:6e:98:fe:9b:5b:30:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:34:AB:96:C8:0D:E0:CC:35:E1:74:0F:98:86:76:62:0D:BE:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:0f:ce:40:1c:31:d4:f2:3c:82:96:b8:9a:91:66:69:cc:
         79:a4:b3:ba:43:d6:d4:50:ca:20:a4:54:b2:72:ac:84:25:77:
         39:1f:17:44:4d:39:b8:5a:a3:83:60:49:5b:8a:db:f2:7c:a4:
         cc:4c:19:80:83:b0:85:b1:cf:37:5a:de:cf:03:d0:aa:47:f5:
         e5:bc:ab:55:d5:5a:a9:06:af:93:28:06:6e:89:8e:cc:1c:5c:
         6e:cd:d5:1f:15:90:5c:75:27:20:78:38:7c:80:30:66:48:73:
         5c:e1:ad:7b:b7:ab:c3:3a:ca:17:ec:b5:4e:f5:0e:1b:37:b4:
         54:0a:50:3d:89:0e:c5:10:8a:9f:22:71:49:04:25:9d:05:90:
         65:8f:e5:1a:a3:4d:42:82:aa:48:b6:00:a7:e8:82:5a:e4:13:
         77:d3:7d:09:ee:01:fb:49:b3:84:22:9b:0e:7c:f3:40:29:5f:
         50:5e:a9:a2:db:5e:81:5a:c8:a9:2a:55:b7:c6:e7:c0:bb:70:
         84:aa:e4:e5:48:96:1f:f5:a3:06:dd:90:c3:16:e2:79:0a:04:
         ed:bb:e9:62:9c:6e:8c:4c:90:45:25:62:a0:b9:29:62:18:03:
         ef:50:ee:dc:74:eb:b9:ad:a3:20:1a:f0:c5:81:72:60:87:ef:
         b5:ed:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org