Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
File:                     cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa (raw, json)
Hash identifier:          jQI+A1H7yt3TWqZzUrItX/CJJcAy2MF2m0XKmY24Gg8=
Subject key identifier:   D5:A2:8E:75:AC:6F:D3:D0:23:3E:6B:EB:C6:72:BC:0D:E6:E5:EF:75
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858479A78C7B7D3967CC65D995100
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
Signing time:             Sun 20 Oct 2024 11:17:48 +0000
ROA not before:           Sun 20 Oct 2024 11:17:48 +0000
ROA not after:            Sat 18 Jan 2025 12:17:48 +0000
asID:                     9084
IP address blocks:        154.1.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:78:c7:b7:d3:96:7c:c6:5d:99:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Oct 20 11:17:48 2024 GMT
            Not After : Jan 18 12:17:48 2025 GMT
        Subject: CN=8ef6ac08-d644-480f-98a1-df6bfd9f97b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:db:05:11:a6:51:b7:79:fc:00:f4:35:e8:
                    71:46:a1:ab:09:64:78:43:47:1d:33:eb:87:5c:ba:
                    79:1d:ce:e5:5f:65:58:88:68:a0:a4:9b:f4:98:a4:
                    39:5d:48:99:97:48:40:f5:43:c0:b2:f0:94:31:33:
                    9f:03:2c:1c:f6:e3:3e:27:10:dc:2f:57:2f:5f:bb:
                    ee:ae:5f:84:8f:75:36:49:98:6f:07:99:12:ab:8d:
                    c6:07:68:b5:3b:dd:3e:f5:82:8a:ce:13:e1:76:27:
                    24:a3:fc:56:d7:59:72:39:30:1e:18:f0:3d:9f:a0:
                    65:88:7d:b3:da:92:23:5f:2b:21:53:76:6d:2d:02:
                    49:26:2f:94:fa:4d:c2:d6:5b:08:d3:9f:5a:5d:b6:
                    5a:eb:55:22:86:79:11:ea:ef:7c:61:ec:5c:66:84:
                    a0:64:20:90:2d:b4:7b:15:da:ad:ba:49:36:be:6a:
                    dd:3a:16:5f:31:28:38:f1:45:b8:0a:c2:f2:6f:8d:
                    e6:36:7b:8f:bc:57:8b:3e:4e:3b:bb:86:d9:61:44:
                    db:d9:42:0c:13:1d:8c:57:c9:0a:ca:ff:b3:75:3b:
                    c1:7a:e0:12:1c:e5:68:3d:db:8b:34:95:9f:43:aa:
                    11:c6:49:49:bd:a1:c0:54:1d:e4:5a:c8:30:3e:7f:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A2:8E:75:AC:6F:D3:D0:23:3E:6B:EB:C6:72:BC:0D:E6:E5:EF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:1f:ee:f6:8e:6a:ea:0d:53:3b:ef:6c:f7:4c:1f:a6:df:
         f3:ce:9a:ae:8e:fa:c1:8f:9a:53:90:58:94:56:75:d4:07:4a:
         bd:98:00:35:1f:51:fd:e1:c7:4e:09:2a:41:7e:43:47:c8:37:
         6b:e0:d9:94:3f:42:37:cb:44:78:dc:37:64:db:5e:44:e1:61:
         1c:c5:a4:55:23:9b:ff:6d:0f:4c:1c:2a:04:2e:45:69:73:f4:
         0d:2f:21:e9:f9:fa:54:5a:c7:b7:a3:6f:50:cc:ec:f1:d8:33:
         d3:96:c3:bb:a5:f2:9b:c8:46:e8:b6:d9:98:e3:ef:19:89:bd:
         3e:6d:f9:0d:a0:7a:46:02:0f:a6:da:97:e0:0a:86:f9:7c:41:
         e2:67:e4:94:fa:d4:b6:fd:1a:e3:6f:cc:64:d0:43:1c:08:5d:
         91:3f:16:59:fa:62:84:47:c8:f3:6d:00:c5:cd:5c:92:a6:35:
         52:bc:2d:ee:6d:60:ba:14:81:4b:59:17:22:70:2d:50:d3:86:
         1d:75:f0:60:04:42:90:f0:ee:cd:8c:03:b3:b3:a7:8e:67:d2:
         48:e8:3f:aa:16:cf:bb:72:6b:cb:50:3c:0c:5e:ef:1a:d5:bd:
         ff:9a:dc:31:ce:f2:7c:9c:cb:4b:dc:9c:07:d8:af:d5:b1:fb:
         77:d0:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:42 2024 by rpki-client on console-fra.rpki-client.org