Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa
File:                     9a01a09c-42e3-3cee-be99-cffa2e621539.roa (raw, json)
Hash identifier:          71z300I+uMAdK4Huoa6I1XBueu8AQNGbZLU43DfjtP8=
Subject key identifier:   D7:78:48:BD:83:96:36:4F:60:89:6E:72:22:0D:CA:00:BC:41:7C:31
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584762D65C07F5D907684553DB00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26744
IP address blocks:        147.124.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5c:07:f5:d9:07:68:45:53:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=36abb957-e0da-45cf-b216-88bb15da6f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:3f:4c:b9:68:cd:53:b2:96:d0:ae:d4:93:
                    1f:47:32:2e:86:f6:6c:e6:97:1f:03:a8:cc:66:a1:
                    e9:bd:b3:6b:eb:79:66:bd:e9:06:48:ba:d0:53:cc:
                    40:0d:1b:1a:4f:52:1f:56:4f:6d:ba:91:eb:39:fe:
                    32:fc:c6:60:52:2c:27:88:9b:17:a1:c4:0c:75:4c:
                    89:e1:de:26:3d:9c:f3:6b:71:60:6e:78:b4:42:d3:
                    69:4c:bb:79:ca:e4:90:f1:9e:bf:bf:49:d6:29:d3:
                    da:a3:6a:36:74:19:fd:aa:f3:bc:9c:12:8a:c7:79:
                    60:6e:f7:27:50:a3:b5:2b:42:93:28:6c:9f:6d:b2:
                    79:8a:6a:11:63:41:3e:d9:7d:97:b1:f1:01:ff:5d:
                    0f:90:7e:60:b5:09:22:61:9e:70:e7:fb:12:46:6d:
                    30:74:b7:76:cc:cf:4e:50:2e:96:b0:74:81:86:2e:
                    6f:84:a5:96:b7:67:98:57:41:e4:4a:15:34:77:da:
                    1d:4a:ba:f8:28:31:11:09:8d:0c:ff:93:f9:be:4d:
                    35:9a:d0:24:4f:f9:fa:5a:b2:81:80:b0:5f:96:d4:
                    31:ca:9f:9b:b8:32:bc:a1:61:94:2a:ee:1f:bf:3d:
                    83:64:4b:75:07:8a:a3:b4:31:c6:09:3f:66:75:37:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:78:48:BD:83:96:36:4F:60:89:6E:72:22:0D:CA:00:BC:41:7C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:16:b6:09:c3:28:aa:9d:15:29:99:07:86:71:cb:36:a8:cf:
         81:7a:74:31:47:01:24:17:23:20:86:5b:ec:99:5c:ca:29:cc:
         c2:e8:b2:d8:86:f7:fa:6a:ba:f4:c8:c9:74:2f:2b:a6:44:3c:
         f5:eb:b6:bc:bc:82:c1:70:fc:30:f0:eb:4e:59:26:d7:66:a4:
         71:c2:ac:87:03:24:98:db:7d:64:40:b7:b5:3e:7a:30:b5:59:
         55:37:4b:65:15:28:37:a4:8f:b9:5a:4f:11:0b:68:11:99:ff:
         79:2e:02:4b:ef:27:bd:79:25:c7:cb:b6:ab:5a:17:5d:9c:07:
         47:a4:d6:70:07:9b:f2:ac:84:47:6b:80:93:0e:26:9a:23:3e:
         7e:fc:eb:3f:cb:97:1c:86:41:d6:1a:b6:c8:95:2e:a0:90:a9:
         f1:c9:02:d9:97:16:2e:3e:26:7f:4d:ca:6f:82:1d:f8:33:8a:
         8e:0d:68:28:2d:f0:98:77:9e:b4:46:5e:d6:b2:0a:65:5e:ec:
         76:75:93:8b:82:0f:eb:42:e9:42:bd:b5:cd:db:d6:5e:d4:01:
         8c:8f:46:c6:c1:65:dc:8c:14:98:bd:49:e2:2e:4a:ee:55:3f:
         70:ee:37:0f:bb:e9:c1:1f:92:5a:87:f5:e5:88:7e:4e:b8:39:
         e0:a0:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org