Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa
File:                     476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa (raw, json)
Hash identifier:          jD/ck0CbBFpa/awYNukmj/8PlQ/G/SuKlFo4zpE9/Qo=
Subject key identifier:   AA:13:05:F8:E7:AC:E6:C5:E8:03:2B:EA:60:FF:F2:59:7B:FD:9E:E3
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858476E01025D52F30A77F4DD1C00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     26744
IP address blocks:        147.124.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:02:5d:52:f3:0a:77:f4:dd:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=82243530-55b6-4a9b-a40f-f2142b8cb895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c1:e6:d5:65:8e:74:66:c6:a4:1f:0a:3d:e0:
                    75:e0:f7:39:88:98:c0:f1:83:db:93:a2:69:3d:e5:
                    3c:7b:e2:eb:5a:e5:19:a8:d4:c7:72:1e:9f:6c:d9:
                    26:ee:31:6f:8e:52:0f:fa:7d:6e:b3:6d:1a:a1:27:
                    0a:3d:a5:b3:4a:72:ff:45:0e:90:40:86:84:8d:e1:
                    db:9f:5e:e8:55:ea:f8:e7:f0:94:84:d3:7a:7b:bb:
                    81:c8:b9:df:72:06:ff:d6:b1:73:a5:9e:19:ed:9f:
                    a0:26:71:6c:b8:71:bb:f6:9c:9a:4b:16:7f:5a:10:
                    0f:f4:ac:f8:98:f3:a0:b1:e5:36:12:27:13:f3:24:
                    29:a3:85:2a:dd:b2:79:31:db:10:73:a4:b5:2d:dd:
                    33:59:d6:78:f1:47:57:25:42:68:a7:b5:4c:31:d8:
                    d5:11:fd:24:2a:b7:fd:a8:90:23:3f:21:a9:f6:6f:
                    25:20:a3:2d:e8:b6:eb:6d:aa:c6:d7:77:24:4e:3d:
                    e5:09:01:1c:49:76:d4:cf:d1:c5:89:e6:90:90:b9:
                    8d:77:5a:d1:40:ba:de:fd:ce:f7:42:5f:9d:f5:23:
                    8c:1b:13:64:d8:bd:0b:8a:d0:f9:8d:23:1c:1b:15:
                    cf:ff:e1:79:7d:08:27:3e:58:20:99:1c:de:9d:46:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:05:F8:E7:AC:E6:C5:E8:03:2B:EA:60:FF:F2:59:7B:FD:9E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:a0:99:8e:14:69:58:d9:6b:e3:7d:9a:14:96:6a:30:00:
         59:e1:14:94:c0:48:ed:a3:2c:f9:62:ca:68:93:06:d9:c0:c0:
         d2:b9:30:10:af:83:56:a5:f1:01:ab:7d:e2:79:02:06:ac:72:
         7c:a1:e3:86:ca:ac:11:ce:27:2a:d3:8f:23:52:2d:cf:74:fb:
         dc:0b:37:04:ea:5f:66:52:22:3c:64:b8:6f:28:2c:14:d3:99:
         ac:a9:7d:e2:ff:ad:87:1f:7e:c2:23:ed:3d:ab:fd:1b:f0:b4:
         4e:0d:93:c5:61:7b:55:34:ca:e0:aa:f4:29:7b:40:c0:35:dc:
         59:84:c6:03:c1:98:54:82:15:7d:e4:d3:ca:39:2c:d1:dc:6c:
         08:93:71:2b:99:01:c6:86:05:bf:55:2c:c1:04:04:d6:89:50:
         da:57:0e:98:d1:98:54:50:cc:79:19:d2:b9:d1:01:28:23:f9:
         20:77:f4:cd:fb:64:ed:1f:c1:f0:b7:84:b0:91:19:99:19:c9:
         69:ec:ee:18:02:2a:3a:f0:9f:00:8f:19:a5:ea:eb:b8:9f:bf:
         35:4e:a7:32:b5:c9:37:b9:4d:a6:4c:f6:2f:76:c1:bb:fe:13:
         65:f0:da:fe:be:bc:fa:d6:40:3a:b6:50:22:b0:63:e7:a2:14:
         c3:fd:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:11 2024 by rpki-client on console-ams.rpki-client.org