Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84eae08d-2c08-3fb8-90bf-b784593f60e1.roa
File:                     84eae08d-2c08-3fb8-90bf-b784593f60e1.roa (raw, json)
Hash identifier:          xSRowpCTyk1ztpkZEWjH+NGP4OJO1iMFT+bz+8hxabo=
Subject key identifier:   A3:2E:CE:ED:88:10:35:A1:B2:BE:7F:4E:5D:55:34:71:45:1E:27:52
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858476E0108757D73EA220595B7C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84eae08d-2c08-3fb8-90bf-b784593f60e1.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     26744
IP address blocks:        147.124.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:08:75:7d:73:ea:22:05:95:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=10f63197-353d-4328-8fcb-4af4acff95a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:53:1f:05:c1:dc:8d:0f:6d:88:71:ce:ee:
                    70:cb:e2:09:7f:4d:29:f6:6c:da:b1:c6:92:53:74:
                    e5:1c:86:a6:99:1d:0a:de:a0:2a:d2:33:67:98:7c:
                    29:30:e1:4a:a4:9c:1d:ac:62:fc:39:fb:d7:6f:bc:
                    77:46:63:c7:4f:99:1e:ab:e3:54:f8:3c:70:97:ee:
                    c8:5d:24:c7:f7:2a:36:80:19:d1:64:9e:22:eb:c1:
                    cf:71:0d:59:3a:16:65:94:97:b0:5e:bc:17:0f:20:
                    12:09:c9:a4:c7:19:9c:e1:72:d0:d0:09:cd:ff:ea:
                    1f:49:5f:be:38:f9:f3:8c:4f:e7:9d:46:0b:07:19:
                    b4:f8:81:f7:6c:b6:ce:2b:1f:a2:fe:6a:49:05:2d:
                    74:11:61:cf:6b:39:17:ff:d1:fe:1d:28:30:00:42:
                    d2:e8:eb:e4:a1:64:ff:b5:52:2a:ec:4b:d0:ce:a8:
                    70:5a:04:79:7c:0a:23:06:4e:6d:b9:85:2e:4d:6d:
                    a1:7b:2f:84:72:df:e3:be:dd:8f:c8:23:7a:9e:56:
                    41:80:d4:9c:57:35:78:37:4e:5b:7a:7a:40:b1:5c:
                    0c:e8:2e:dc:6f:5b:fa:f2:d4:8a:57:19:72:27:a9:
                    16:c8:15:d9:3e:2f:78:c6:68:a0:9c:e1:81:7c:28:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:CE:ED:88:10:35:A1:B2:BE:7F:4E:5D:55:34:71:45:1E:27:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84eae08d-2c08-3fb8-90bf-b784593f60e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1f:2b:f7:f4:49:1d:38:22:37:91:5f:2f:51:02:ca:17:47:
         4d:2b:2a:d6:52:11:15:c4:eb:53:75:04:06:00:e3:0c:42:3a:
         7e:09:45:81:e5:d5:2f:6d:e1:0a:49:54:5a:66:6c:92:4a:5c:
         d4:bd:25:36:b1:66:5f:d6:a9:87:bc:fe:ac:f8:71:2a:1c:21:
         dd:5e:31:48:17:7a:ad:5f:b1:12:4c:95:b3:5e:10:bd:ee:ab:
         9e:82:56:25:51:2b:1a:ce:89:bf:ad:59:ee:ee:08:a7:24:71:
         ee:4a:bc:11:c3:f9:1a:ea:03:b6:d7:80:e6:f4:a4:2d:f0:36:
         2b:5b:a5:68:0c:ba:9b:08:c4:8d:c0:8e:65:ea:c3:db:cd:de:
         1d:b3:ba:51:ad:a8:7c:87:25:cc:7f:03:8f:99:42:74:d7:60:
         80:80:6e:06:bb:40:59:4b:2e:ed:1a:dc:f1:2e:8f:e3:2a:a7:
         64:61:37:7d:2c:24:d7:8a:b0:78:c7:e9:ee:bc:ff:1c:2d:ad:
         c4:c6:44:e3:fc:41:d3:e6:17:d2:c4:88:1a:14:79:9a:86:83:
         44:c5:06:87:93:53:0f:1d:a5:cd:d3:57:96:8d:9f:d9:1d:bc:
         c3:06:b9:46:be:88:08:9e:88:c1:40:6d:36:7c:a9:4e:bf:11:
         52:f9:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org