Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/46691fe4-01bc-3109-80f4-d2b710e2c800.roa
File:                     46691fe4-01bc-3109-80f4-d2b710e2c800.roa (raw, json)
Hash identifier:          Xx9J3iOtt1npoeNm0wOwYBvEFHavtgQgnCnLB3lsLr4=
Subject key identifier:   30:FA:D4:53:A8:3C:E7:56:B9:30:50:4B:0F:CC:3B:A8:9D:CE:D0:8B
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A28C58B56FD9CF443BB60
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/46691fe4-01bc-3109-80f4-d2b710e2c800.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:28:c5:8b:56:fd:9c:f4:43:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=11f95edf-3ab2-4183-b07a-e68930ee1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:d8:0d:9b:c6:36:b5:79:50:f1:4f:46:20:
                    6f:f3:a1:0b:7b:b7:dd:b1:b9:f7:eb:24:c6:ef:4d:
                    d8:23:ca:f7:91:2b:cd:d1:9f:8c:eb:8f:35:ae:10:
                    13:f6:35:2f:8a:81:20:f6:2c:7a:d0:9d:e4:10:d9:
                    85:30:75:b4:37:78:31:3b:40:4b:9a:2e:20:0c:5d:
                    45:0c:25:31:73:14:1e:b8:90:83:11:55:5f:b8:2b:
                    e4:2a:9e:9a:9e:5f:3f:dc:26:f1:2d:94:71:26:0c:
                    30:26:ed:16:0b:38:a4:59:9d:0d:06:93:11:1e:bb:
                    40:27:dd:1b:7c:24:d7:6e:13:49:41:9c:a1:a7:59:
                    12:20:6c:a4:3e:04:1d:45:22:9e:c3:24:93:34:d9:
                    68:0d:a0:9c:af:f9:65:92:b8:bd:8c:bc:50:22:4a:
                    a7:a4:ba:d3:50:58:a0:e9:45:22:49:28:ed:5b:14:
                    9f:55:fd:65:e9:cd:6a:0d:37:e6:65:37:c8:90:4d:
                    c7:f4:45:f3:6a:12:67:de:22:aa:33:08:e4:02:93:
                    be:28:8a:18:53:23:70:a8:a7:57:88:72:df:a0:b8:
                    a7:26:5e:73:25:a2:42:40:8a:e1:1e:c4:c2:a5:3e:
                    75:35:fc:62:96:0f:4d:74:a5:16:10:52:b8:25:95:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FA:D4:53:A8:3C:E7:56:B9:30:50:4B:0F:CC:3B:A8:9D:CE:D0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/46691fe4-01bc-3109-80f4-d2b710e2c800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:c7:d3:76:51:82:18:6c:4f:25:e0:f2:0d:42:ad:51:30:
         a2:50:8a:c7:f5:ea:e4:17:02:c1:f7:d0:7c:be:5e:4e:08:f2:
         31:87:29:05:69:06:1a:fb:18:2d:eb:6a:61:03:de:72:0d:99:
         1c:d5:52:c0:a7:88:d9:c7:4e:7e:0b:90:4d:1a:36:aa:c0:d2:
         d7:e9:ac:83:8d:ac:b6:30:94:c4:51:6c:89:37:38:f4:24:6a:
         72:29:1e:7e:46:39:68:ac:c0:e5:26:11:60:1f:d1:e2:83:8f:
         e1:ee:a8:aa:e3:c7:b7:32:3a:45:60:e9:95:ac:7e:09:48:a0:
         ec:e9:53:15:aa:2c:63:eb:6d:f0:15:b3:20:4a:8d:a9:77:a4:
         32:e9:0c:fd:d9:77:7a:88:e1:18:48:16:51:0b:ae:b9:ea:d4:
         79:34:90:16:7a:43:f6:9c:0a:dc:1b:72:2b:8e:fa:98:a8:b9:
         d4:9e:af:9f:1d:67:86:32:7d:d8:62:64:b4:99:9f:c1:b4:ee:
         e1:44:0c:35:44:01:4d:fe:83:50:7b:3f:1b:49:02:7b:0c:e8:
         24:1b:26:cc:e5:76:a1:2b:33:c4:06:2f:9f:c0:4e:41:ba:52:
         df:8b:4e:fa:60:9a:86:c5:11:b9:58:3d:21:d9:f0:76:e4:17:
         b0:c0:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org