Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/746db99e-ea53-3226-95ee-8b8114c07e2f.roa
File:                     746db99e-ea53-3226-95ee-8b8114c07e2f.roa (raw, json)
Hash identifier:          vQAFwL+E7TZwQibmf5HK+6MZYxyS5/72Qpq81aK7bL8=
Subject key identifier:   19:67:0B:3C:47:43:FC:34:F5:93:0F:F8:47:20:A9:50:AF:97:D5:AA
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F43285847792BB49C015D3C26874C6640
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/746db99e-ea53-3226-95ee-8b8114c07e2f.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        192.172.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b4:9c:01:5d:3c:26:87:4c:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=f20046c9-339a-4085-b69b-08bc37f25879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:17:a0:ce:27:dc:85:97:00:18:8a:21:8d:
                    52:8c:aa:a4:64:ab:f5:04:4f:d0:a0:03:40:e5:66:
                    76:db:25:14:59:50:e3:e9:17:5a:40:d5:6b:95:ae:
                    fb:ab:77:f2:1d:bb:d2:54:2f:b9:f2:a9:87:ac:9c:
                    d0:21:bc:68:10:47:3c:bf:2b:73:4c:5c:97:ce:0c:
                    0f:9a:84:4f:d0:5f:a7:e5:b1:30:dc:fa:da:96:85:
                    73:f1:bf:d4:5c:39:e6:e7:53:b4:09:00:91:85:bc:
                    3b:d8:46:24:9a:db:a0:0d:76:ef:42:1c:d1:65:c9:
                    f8:42:2b:84:a8:3b:cf:98:a3:11:45:ec:8a:d4:8f:
                    f7:d8:59:d1:09:55:e1:71:4a:0a:0b:c1:c0:23:41:
                    33:0b:46:ce:4f:34:75:37:ff:a0:01:ce:d3:d1:a8:
                    17:2f:2c:96:64:c5:ec:e1:85:7f:18:39:a5:e2:c5:
                    f4:eb:04:4f:0f:bd:c4:33:db:ab:87:80:f9:34:bb:
                    43:5f:77:af:d9:88:78:20:20:fa:88:ec:1d:0a:8f:
                    2c:16:6b:57:a4:1f:3c:00:d6:96:89:06:0b:2c:53:
                    5d:b8:fe:f3:26:6a:b5:dc:42:48:8d:4f:c1:6a:cd:
                    77:5c:bb:bc:90:64:0d:18:f7:30:ba:cb:e3:c1:6f:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:67:0B:3C:47:43:FC:34:F5:93:0F:F8:47:20:A9:50:AF:97:D5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/746db99e-ea53-3226-95ee-8b8114c07e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:82:2f:da:bb:09:bd:08:39:ef:ff:b1:c5:42:5b:36:c8:
         fb:a1:60:ab:13:2c:d4:76:a6:61:21:35:03:c4:1b:01:b4:f7:
         64:f3:66:82:28:13:a8:83:48:1b:93:9c:0d:22:59:13:dd:b6:
         cb:e6:d2:c6:b6:d0:4b:34:ed:58:a6:19:40:e5:85:c6:04:6e:
         81:68:72:a7:77:bc:0b:7b:ca:d3:5d:d5:69:b6:e6:43:5a:99:
         fb:05:fd:28:5d:df:28:8a:02:7b:30:9e:80:2b:67:c4:7c:ff:
         71:fd:fb:3d:37:a6:42:00:44:52:26:0c:50:1f:5a:cf:b7:de:
         36:27:83:2e:93:82:dd:da:d7:d7:b6:d1:3e:85:8f:38:48:7e:
         b9:4b:cd:f9:74:2f:f5:8c:3a:25:d3:00:31:11:f0:65:bc:79:
         1d:0a:a0:0e:19:bb:46:d7:ea:4f:a2:2b:ae:fa:2d:33:a3:b0:
         7e:ed:ac:19:c1:99:52:d9:46:dc:df:b5:4f:db:5f:26:1a:d2:
         5f:f3:eb:b0:ee:83:99:33:27:8a:e4:26:39:d8:a1:42:9f:3e:
         54:15:6f:d6:d0:49:55:f4:12:a1:97:6c:56:e3:f3:45:35:3b:
         b9:94:1c:69:80:b9:58:ff:10:d8:ad:d8:c8:de:a1:cd:d8:db:
         04:96:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org