Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3629b568-ac97-3868-9cdb-4bf16fb37162.roa
File:                     3629b568-ac97-3868-9cdb-4bf16fb37162.roa (raw, json)
Hash identifier:          TTGwKtk8z4AZMs9pq/rQ8qAen8pQw25zk6TrBdFeUsI=
Subject key identifier:   1E:2B:67:37:A0:CD:1F:F8:79:2A:03:7B:C5:CB:24:89:4F:EB:BF:5A
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AE4BD25E5AEE8D63D07E4
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3629b568-ac97-3868-9cdb-4bf16fb37162.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e4:bd:25:e5:ae:e8:d6:3d:07:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=c14469b7-f239-4725-83a5-f157cbc694f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:dc:84:ef:41:5a:fc:4b:bc:88:24:81:11:
                    46:10:8f:8c:7c:9c:f3:58:15:27:58:82:0a:a1:f4:
                    bc:d4:65:7b:af:8b:74:e0:47:2c:fa:6b:78:c1:59:
                    4f:ac:ce:e0:8a:5e:73:2b:86:0f:4f:87:63:cf:2b:
                    5b:b0:e3:b5:fc:0f:d9:a2:14:11:41:07:ed:9e:27:
                    00:b5:58:37:1e:9e:57:cf:5b:97:3d:bb:c9:3a:01:
                    67:fd:79:ba:39:a2:c8:82:1d:35:74:70:f1:1f:39:
                    3c:c4:9a:2e:b2:32:71:80:ed:fd:f1:7b:f7:06:16:
                    43:cc:bc:71:d9:a7:0d:d3:cd:22:a6:fb:10:99:ab:
                    c3:c9:4b:ef:f5:8d:e4:6c:89:21:09:9d:34:0a:29:
                    67:6b:0a:a5:37:84:b1:95:fd:1c:f6:65:33:57:2c:
                    ac:f0:a9:0c:47:62:12:af:f7:60:92:da:55:b8:cb:
                    b3:67:4e:5b:f5:5d:d0:60:ac:19:32:7e:9b:e7:9f:
                    27:1c:16:70:8c:45:b0:de:74:81:b4:9a:32:ac:21:
                    0c:67:5f:98:fd:d8:f2:96:ff:9a:f9:f3:b5:95:7d:
                    92:42:36:6a:30:76:33:0e:d7:d1:a2:e3:71:1f:88:
                    f8:84:d3:42:4e:65:9f:df:dd:01:0e:14:ea:dc:ee:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:67:37:A0:CD:1F:F8:79:2A:03:7B:C5:CB:24:89:4F:EB:BF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3629b568-ac97-3868-9cdb-4bf16fb37162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:15:60:fb:d8:3d:37:0e:24:36:7c:b1:f5:f0:e1:db:1c:46:
         17:64:94:e2:c4:07:e7:93:96:59:d3:4f:67:4c:1e:81:4b:5b:
         30:61:46:33:e0:4d:bf:03:96:20:71:e1:fc:36:dc:a6:cf:6a:
         ad:bd:76:1e:40:ba:73:f3:15:4e:7b:c0:20:b0:53:34:b8:2d:
         a4:c9:05:63:95:a9:e8:ef:da:c8:0c:ec:96:92:a9:7b:86:76:
         3f:0b:ec:02:b2:e5:1b:29:d9:74:ab:a4:8c:f9:ca:0e:8c:b4:
         ab:21:99:c3:87:bd:0d:62:7c:70:d6:82:c5:b9:6b:0c:3a:83:
         e4:f6:21:51:fd:66:b7:7b:a4:d2:25:61:52:48:a7:3e:0b:0e:
         03:18:28:0f:eb:fe:4f:0e:57:27:fe:77:b0:28:b8:8d:dc:7a:
         1d:4d:4b:ff:dc:d2:1d:aa:6e:18:24:d7:ce:f0:39:fd:6a:58:
         71:56:c8:03:5e:e3:3a:ae:07:da:15:87:cb:30:c5:88:bd:49:
         16:c9:c2:93:2f:65:fe:99:3f:c5:29:29:ef:76:62:fe:d7:83:
         c8:87:14:db:1c:22:32:2a:e9:34:54:90:3d:78:a7:e0:1f:ae:
         41:55:88:e0:04:20:e2:85:88:ac:2d:ab:01:b7:61:20:00:f8:
         19:d0:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:49 2025 by rpki-client