Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
File:                     18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa (raw, json)
Hash identifier:          3HeFKlYgJCR1l1Y1KWZuva3xZavxSQG4O+MDeNFt5jU=
Subject key identifier:   A9:B0:00:2A:DA:27:4E:27:96:D4:25:27:62:76:74:BC:84:E1:27:81
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584731FB9A35F8CE6EA769F711E0
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     26535
IP address blocks:        207.251.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9a:35:f8:ce:6e:a7:69:f7:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=9dfdc051-179e-4986-8819-c13ba17821a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:65:50:8d:53:3d:81:e7:f3:33:1b:8a:4c:
                    d9:f9:33:ce:21:84:89:77:a4:c7:7b:c6:9d:8e:d6:
                    74:6a:a6:64:30:a3:f2:84:ef:38:96:0d:1d:fb:0e:
                    9b:a9:85:5a:1c:ff:33:06:91:cc:5f:67:b6:07:7c:
                    f1:52:a8:3e:65:4e:67:87:16:07:22:ca:76:29:6b:
                    46:33:25:fd:81:0c:5c:b0:53:74:f8:50:15:c4:4b:
                    7e:b7:c0:3b:99:45:0c:ea:43:d6:17:bf:8b:d3:e8:
                    a9:76:1d:45:1e:b8:47:d3:3f:f3:22:bc:e4:38:e9:
                    6d:9f:b1:14:f1:62:24:f6:2a:c2:bf:6b:93:a0:0c:
                    36:85:dd:77:32:4f:2f:0c:7c:4e:30:ae:26:d4:3c:
                    de:71:a6:a0:d5:38:81:9c:5d:2a:e4:4f:af:8a:30:
                    53:91:e3:0b:6b:9c:aa:de:c9:c2:bf:1f:1f:fd:4f:
                    a7:f7:04:48:30:30:25:83:e8:84:a4:2f:57:49:d7:
                    67:67:33:cc:57:c0:c1:52:cf:62:39:45:37:e8:b1:
                    be:e1:be:d5:8b:57:9a:b1:a7:e8:e8:5f:9e:79:bc:
                    74:8e:0d:26:45:35:d3:1d:07:aa:ac:80:f2:41:44:
                    4a:f6:d4:f6:f7:5a:ba:8a:6d:be:b4:46:89:3a:12:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:00:2A:DA:27:4E:27:96:D4:25:27:62:76:74:BC:84:E1:27:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:1f:9a:33:ff:58:00:87:99:bf:bd:ee:ce:93:0e:2d:ee:
         3b:25:1f:db:af:62:e9:94:a0:8b:bb:53:45:00:c9:62:71:e2:
         3c:17:ad:4b:9b:53:d0:71:d1:c2:99:df:a3:80:e1:13:cd:2e:
         95:1a:c7:e0:61:23:67:60:b2:6a:ce:59:1f:77:12:f8:3a:70:
         5c:80:f0:fd:05:cc:17:2e:d6:f1:bb:09:4b:6e:f7:8a:ea:26:
         71:61:74:e8:48:38:db:38:a7:57:8d:54:80:b7:d0:2d:fe:4e:
         ce:6e:f0:4f:52:83:2a:5f:a6:cc:05:0e:88:a2:2c:38:03:f3:
         d2:56:7c:76:95:e4:bc:c1:c1:8d:f4:7c:14:b9:0c:c8:cd:ad:
         c5:f2:e0:d6:dd:33:a0:a4:3f:df:60:9d:28:80:1c:f5:4d:34:
         46:10:e7:89:ab:c4:8e:4e:b7:38:2e:6f:c3:58:43:27:a2:d1:
         3c:c0:69:dd:03:4d:32:2b:5d:43:bb:1c:27:dc:28:ef:b1:36:
         5f:e3:0c:03:b3:33:01:b8:5d:5f:72:be:d7:ee:5b:28:fe:8a:
         11:48:1a:19:7b:3e:e0:80:80:d0:59:ba:c0:7a:e9:73:94:79:
         f9:8a:7f:1c:3c:95:a8:54:86:db:4f:18:be:b9:a0:13:ea:5d:
         05:73:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:02 2024 by rpki-client on console-ams.rpki-client.org