Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
File:                     4622086b-484d-3a11-990d-8d78572ad2fa.roa (raw, json)
Hash identifier:          /jqFCHcpbc2uTLYg+lQDst59df4sTDCW8meP9pupXA8=
Subject key identifier:   75:D1:58:52:94:64:A9:35:29:DC:ED:08:C8:94:C3:48:9A:D4:4F:63
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858474F4B7C44ADCDC63951E9AE80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     109
IP address blocks:        173.36.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7c:44:ad:cd:c6:39:51:e9:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=bf120195-cf58-4829-9570-f5690be2a975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:cc:d1:3a:d9:f0:71:0d:28:d6:6a:11:68:
                    d6:7e:2b:51:1a:a3:67:24:cb:b6:a7:d2:d2:a0:3e:
                    d6:4b:34:7d:91:95:1c:19:31:7c:df:52:35:45:d1:
                    37:88:2a:35:bb:69:da:e4:03:b5:f1:4d:57:43:5a:
                    e3:6a:3f:1d:91:c2:44:3e:70:44:7e:7f:69:9e:be:
                    25:8e:f4:9a:4e:38:79:8e:7a:a8:13:a0:1a:a0:83:
                    fe:53:c4:cb:42:2a:8e:84:d3:b8:6f:ba:2e:00:b2:
                    c9:69:6d:ca:01:04:6c:bb:ee:c1:09:94:5b:54:49:
                    e0:f4:6a:f0:42:45:19:94:37:79:bc:b0:a4:53:66:
                    ed:c2:af:9a:d6:27:3d:f7:29:57:d4:11:03:97:30:
                    3f:a7:cc:a1:b1:ab:ad:78:e2:e0:70:b6:f2:3f:c0:
                    03:10:45:fd:a6:c0:69:6b:16:ee:63:3b:83:45:63:
                    cf:3d:7a:93:56:c2:11:45:97:6f:21:45:b8:41:b3:
                    d0:42:80:29:43:10:32:b3:91:15:21:40:95:0a:7c:
                    f3:f6:5b:07:4f:b8:f3:dc:ac:2d:f5:3c:2b:9d:ff:
                    f4:ee:58:04:90:0d:f1:fb:8e:30:35:05:7d:d8:94:
                    81:e7:61:25:31:10:07:d5:09:53:94:15:97:ba:18:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D1:58:52:94:64:A9:35:29:DC:ED:08:C8:94:C3:48:9A:D4:4F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:27:0b:10:d4:e8:65:3c:7d:41:b9:06:6f:eb:b2:97:ea:a8:
         91:98:81:af:bc:cc:a9:13:d2:f5:66:de:8c:fb:66:6e:5b:32:
         2a:99:b3:2b:08:cd:9e:3f:bb:d0:e4:a8:9c:87:78:fe:26:7d:
         bb:8f:3c:28:4e:72:69:eb:9b:7f:13:83:2a:83:e6:37:9c:89:
         63:90:5d:c2:d3:21:d0:8e:b3:32:d4:93:3c:c0:83:9e:04:f2:
         0d:19:b5:59:97:21:51:59:c5:2b:4c:ea:3f:f3:a1:a6:94:ad:
         e7:42:43:24:d3:de:cf:0b:47:59:8a:14:cd:d6:2c:89:9d:59:
         4a:43:2d:15:31:29:a0:d5:99:8a:00:8a:a9:05:65:ef:8f:01:
         db:1a:36:de:e1:ba:6c:cb:55:c3:fe:f1:ae:5c:3e:8e:ae:cf:
         9e:2a:f3:72:11:1d:fa:52:8b:97:0f:42:de:b9:4d:21:33:f8:
         cd:1d:34:b0:c3:51:7e:e1:91:4b:10:36:b4:b2:db:ca:f3:61:
         60:b4:ab:4b:1d:55:cb:79:2b:52:71:c7:3e:c5:7f:82:29:08:
         f0:47:be:e7:3a:25:2d:b7:dd:ed:8a:18:06:ee:c1:6f:dd:61:
         c4:05:46:9c:f5:81:45:53:96:0e:00:8d:3a:31:a9:78:a0:1e:
         db:72:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org