Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
File:                     c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa (raw, json)
Hash identifier:          quWTpXpDg+6ahn4QQLM2HZNwjupMXaLhO+d8Le//GHM=
Subject key identifier:   42:35:01:75:B7:8B:92:C8:5E:40:60:6B:35:06:8A:18:3A:45:30:FA
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F43285847924BDF0FF5F31EDEB2957900
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        170.205.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:df:0f:f5:f3:1e:de:b2:95:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=c7cd14da-389d-4899-abb4-e48b516eb647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:40:7a:66:b3:21:2a:92:42:3d:4c:e3:99:
                    78:33:a2:2c:92:e9:2c:b2:ab:50:26:c7:34:7e:4f:
                    cd:5f:db:ae:79:53:70:ad:2d:11:97:d1:c7:31:0f:
                    55:73:6e:4a:68:86:cc:16:e4:3d:b8:f9:76:91:fd:
                    c5:a5:71:3d:12:79:4b:d5:07:b3:71:26:51:12:85:
                    12:39:7c:b9:c7:ea:8f:5d:61:35:47:b1:d4:d8:ce:
                    23:d7:5c:d7:a9:08:c3:f7:e9:25:8c:75:a5:ee:fe:
                    65:f9:98:54:38:6d:b0:a9:17:64:60:d5:0c:cc:3d:
                    bc:cd:e9:60:dd:84:6a:50:81:5b:0f:f2:c2:4a:37:
                    1a:8d:c9:08:09:7f:15:37:b7:f0:62:4b:72:c8:33:
                    8f:97:03:31:28:d5:b0:d8:f3:c9:56:43:bd:6f:24:
                    e7:e9:dc:4b:1c:74:65:d1:63:56:80:32:f9:da:de:
                    63:6b:83:82:a2:69:29:5e:82:58:db:7a:dc:fc:b0:
                    50:96:9b:90:b3:57:3b:2a:20:03:66:3f:b0:ac:7c:
                    68:19:37:79:e3:29:7c:04:59:2e:ec:61:a3:22:e4:
                    61:54:33:d3:cd:28:1f:b0:f3:0a:4a:36:cd:55:1c:
                    4e:f6:32:21:80:1a:1b:f3:9f:47:c4:2b:de:e9:f1:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:35:01:75:B7:8B:92:C8:5E:40:60:6B:35:06:8A:18:3A:45:30:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:4e:f8:48:42:a1:8d:3a:2e:e5:b0:2f:9c:72:9a:4b:cd:
         d3:09:cb:08:dd:38:8a:1c:6b:5b:e9:e6:95:78:85:80:dc:3b:
         d9:ad:68:a1:d7:97:09:24:ee:e0:46:da:04:96:54:4c:8f:43:
         35:47:69:57:47:0a:69:da:f9:ff:f7:c6:52:04:db:84:2c:b4:
         dd:41:4e:b8:1a:c9:a9:29:52:d7:eb:52:96:89:8e:96:bb:3a:
         1b:be:11:4a:3b:78:55:8c:a4:8d:ee:e1:32:3a:c5:00:7c:58:
         48:97:71:06:f7:80:69:24:a3:a5:7d:fc:22:3e:50:28:3d:0b:
         b4:75:dc:3f:33:3c:a5:5f:7c:72:4b:6c:c5:ea:0f:db:9a:b2:
         38:4f:4c:47:7e:57:fe:6f:15:ea:00:59:33:74:c9:45:16:62:
         9e:39:f1:e4:a8:7e:dc:9c:f2:eb:c5:4b:84:6e:a0:95:52:ca:
         11:59:a0:9f:71:09:53:ef:f5:d9:db:bc:31:fa:70:96:c7:a6:
         ce:e8:37:4b:31:7c:d3:3f:3f:e1:43:37:73:2d:01:85:86:25:
         f1:f5:b4:de:95:be:bc:61:b1:c1:54:59:1c:dc:9a:eb:ce:16:
         91:da:ef:76:26:aa:b2:56:15:ec:3f:bd:0f:ce:54:20:2a:c3:
         9a:ab:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org