Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa
File:                     a71480e2-3165-3f8a-a371-6248b3e64558.roa (raw, json)
Hash identifier:          EiXpE4XT3/ijIeATQidTC+WwuiOtknXZ5nAKXP+yxGk=
Subject key identifier:   75:4E:48:67:D2:09:50:AB:68:F4:1E:D4:9A:6A:00:20:C3:DA:A0:BE
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F43285847D834B068B298E3E8C814BA98
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     400948
IP address blocks:        205.236.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:b0:68:b2:98:e3:e8:c8:14:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=408477b0-1afc-4ab8-b83e-2158a95908ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:67:7d:ea:f9:cd:bf:31:13:e0:57:c7:96:
                    c9:9b:54:09:82:66:4b:8c:13:34:78:77:b6:76:b3:
                    ec:ba:5b:df:1c:98:41:29:4d:ed:d0:33:22:27:ee:
                    12:f2:eb:c9:ef:7b:d9:8f:26:89:32:a7:2f:93:80:
                    20:3c:8f:fc:46:ce:a0:bf:ac:50:c8:df:a2:af:24:
                    57:83:1f:a5:fc:7a:d4:31:73:5d:57:8d:9c:1e:fd:
                    1a:f8:cb:a2:25:89:c8:22:1e:ad:8f:b4:6f:bf:11:
                    9c:3a:51:8d:a2:8f:20:0e:d0:04:8a:64:d2:41:ec:
                    ac:49:35:92:a6:2c:5a:00:df:76:1b:f1:2b:29:da:
                    d8:e5:79:64:02:4d:ce:58:10:4a:b1:4f:74:48:59:
                    d1:4b:f2:12:d6:33:74:00:d6:5b:55:ec:b9:a1:f3:
                    bb:31:c7:51:dd:8d:d5:66:9d:a8:a6:c2:75:09:42:
                    30:5f:94:84:56:6a:64:8b:eb:d2:4d:37:7b:a0:fa:
                    f9:5f:37:56:3a:b9:0c:cb:ce:61:df:e5:eb:51:72:
                    1c:c9:e3:c6:07:3c:fe:8c:a0:9f:c9:05:18:b7:f0:
                    f2:d7:1e:36:96:8b:62:4b:f7:44:ba:9e:fe:b5:ca:
                    9a:26:74:ce:7d:5f:ca:b3:82:1e:19:11:71:b9:e1:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:48:67:D2:09:50:AB:68:F4:1E:D4:9A:6A:00:20:C3:DA:A0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:ec:e9:7d:57:9b:9e:84:3d:6e:3f:86:b9:54:16:f8:be:
         dc:d1:84:04:40:9b:1a:81:45:20:d5:b1:dd:13:72:e0:a0:7c:
         03:91:a7:f2:3c:d3:aa:72:32:6d:d5:3b:4e:d2:64:70:fd:e9:
         c1:12:a7:c3:8b:0b:e0:41:fe:73:42:df:97:53:3d:7e:96:79:
         85:98:4d:84:f1:6e:10:07:e0:a5:a7:31:e0:16:3f:96:b7:12:
         74:d2:e6:90:ae:88:db:76:59:f3:55:55:91:34:97:f1:1a:40:
         3f:fa:1a:55:8f:bd:6f:f9:16:6c:b3:c6:76:93:a1:44:e1:5b:
         ec:0c:16:33:15:60:6b:53:b8:3c:b2:fa:aa:7a:4e:9b:cc:4e:
         79:9b:4f:cb:9e:5a:49:43:6f:19:e3:b0:40:22:9e:58:09:31:
         b6:7f:66:64:37:a0:7c:79:42:7b:43:6c:a2:9c:a3:6c:34:f5:
         d5:3b:3c:25:d6:b1:cf:d0:e9:9d:6e:19:83:a1:36:59:0e:54:
         f4:87:ce:2c:cc:ab:1a:b7:b2:79:d4:a8:5b:63:50:41:f8:0f:
         1f:b3:00:85:d8:e3:36:56:20:4c:d8:5a:89:77:53:7a:f9:67:
         77:19:dc:a7:e4:e7:e3:40:87:10:09:e0:b9:48:ac:83:86:9e:
         e3:64:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:16 2024 by rpki-client on console-ams.rpki-client.org