Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa
File:                     1bf3fe6b-9121-3156-894a-69747707ba38.roa (raw, json)
Hash identifier:          z3+arMPq2DFF2ycK50juYTszdOLNk/RCqX8wf8hx46o=
Subject key identifier:   F3:DF:D1:2D:A1:79:64:92:8D:DF:E0:B4:D3:D9:71:F3:F5:47:3B:4E
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584774FB91C322E11144987F8A00
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1706
IP address blocks:        198.60.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:91:c3:22:e1:11:44:98:7f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=36377084-46f7-44d6-a152-bc0b5e68033b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:75:7a:03:5b:5a:5e:69:22:12:2b:de:20:
                    5f:7c:d1:3f:dc:3d:03:84:12:0d:cf:c4:e3:92:7b:
                    f2:06:ee:66:75:3c:b2:49:2c:59:7f:d9:5c:a3:cf:
                    fd:a7:25:9f:1c:4a:f1:30:1f:f9:3a:68:e6:1e:01:
                    63:f0:b9:3e:f0:96:b6:99:e9:3d:f1:0d:d7:82:bb:
                    dc:86:3d:6f:e4:a8:2e:a9:a7:ea:9b:ed:03:23:42:
                    5e:45:c5:3c:09:9f:7d:27:11:39:6d:8e:97:90:e3:
                    a6:5b:74:57:72:8d:47:a8:39:87:2c:fb:60:10:40:
                    e8:ab:72:2d:07:ed:1d:cb:c8:91:f7:85:1f:a9:3b:
                    c4:ee:63:6c:cf:68:7b:f1:05:7d:30:4d:60:f4:e6:
                    d0:12:06:dd:2c:d3:bf:2d:0f:85:7e:ac:52:59:96:
                    89:73:e5:0d:5a:af:f7:04:ab:a1:00:39:36:f1:5f:
                    71:f3:ce:16:2d:2d:db:3d:0a:1b:ba:a8:9e:eb:09:
                    24:28:4d:6f:ba:81:14:cd:96:38:9c:21:9a:7b:b0:
                    2c:bf:ef:48:b4:96:7e:79:0f:d0:cb:a6:51:cb:a1:
                    df:4f:ab:cd:5f:53:56:d0:5d:ce:55:11:28:d5:35:
                    95:a2:f4:48:cc:39:35:8f:82:f6:6d:fc:5a:17:ee:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:D1:2D:A1:79:64:92:8D:DF:E0:B4:D3:D9:71:F3:F5:47:3B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:55:3e:f9:e4:79:ae:ea:c4:c0:ec:2a:16:73:4c:4a:6f:
         b3:96:1b:f9:d1:33:bb:a7:7d:bf:60:f8:bc:57:52:4b:42:ef:
         1a:b0:52:1f:96:8d:81:68:17:29:42:79:f0:8b:39:ae:5f:45:
         34:fb:d9:a5:ba:69:b9:c3:e1:0e:54:be:4d:9d:03:a6:7d:ff:
         e3:e0:5d:04:c4:4b:d1:41:ac:a1:cd:1d:8a:62:f2:0a:6d:dc:
         56:25:e7:1a:2d:cd:ea:2f:54:07:10:84:61:c7:8a:99:0d:a2:
         af:ae:c1:e7:56:98:d7:7d:68:82:29:c3:c9:b4:01:0e:f4:f5:
         a9:fa:87:8a:de:79:4d:67:e7:be:80:2c:24:0a:f3:90:e7:ec:
         62:0e:00:33:20:59:a5:90:61:b1:fe:75:31:db:64:01:cd:d0:
         94:51:4d:d2:60:28:21:67:9b:cd:63:ee:52:0b:39:37:12:62:
         21:3c:d8:de:06:77:bc:40:c5:35:f8:c5:74:b3:10:92:e2:8f:
         97:ce:71:65:a4:75:b2:a2:0a:b1:c4:2f:fd:77:03:c6:50:55:
         81:03:15:27:1a:3b:e6:48:bb:c5:d4:e2:59:57:80:bf:81:64:
         bf:b9:db:9d:63:13:b0:05:4e:cc:f0:30:ef:54:68:4b:60:6b:
         fb:5a:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:33 2024 by rpki-client on console-ams.rpki-client.org