Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
File:                     76dc3b99-7478-3f95-b13d-ededcd4836ca.roa (raw, json)
Hash identifier:          t8TY9v3Asp2g3LRz7sEyWX4FZmSUQs2BlvXNNH1tNG0=
Subject key identifier:   75:E1:05:4A:64:2D:E9:19:E3:0B:EC:EE:18:15:1C:CC:CE:93:84:CD
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F432858476C9DBB86C0E9C621408C9B80
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33234
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bb:86:c0:e9:c6:21:40:8c:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=44d9033c-9003-44d9-84a6-7bfa38363020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:84:6d:6c:f9:58:a6:9f:f9:cd:d9:8f:fa:
                    a2:41:42:d4:b3:2b:41:76:59:cf:1f:49:82:03:ce:
                    4d:b0:7f:e6:e9:58:f8:37:4c:ce:f8:f8:f9:65:62:
                    b3:29:08:95:7f:8a:6f:84:97:c0:bb:9b:39:bf:a2:
                    8a:2c:ec:97:9f:37:e5:4e:a7:f9:d5:8f:bb:8e:35:
                    75:5b:9e:27:4e:8d:11:60:c3:76:26:1b:f3:ca:9c:
                    db:5c:a4:c8:47:b5:2f:db:d4:f5:32:13:bd:d7:72:
                    42:2e:f3:2e:4d:0d:e7:1c:33:40:85:87:0f:70:cd:
                    f0:00:dd:8b:e7:a2:cf:11:34:4d:6f:71:2c:04:81:
                    ee:1c:2e:b3:35:f0:6a:99:6b:2d:01:48:79:4d:ff:
                    5c:5f:60:ac:63:54:d2:a7:90:6f:71:c9:ff:0d:e9:
                    46:d5:30:db:31:f6:11:cf:4e:54:0b:62:ee:6c:c1:
                    cc:7b:70:eb:26:95:2a:96:3b:d2:40:bd:d7:e2:56:
                    96:ee:ff:72:d0:04:81:1d:17:49:f5:75:ad:c9:67:
                    3a:07:98:f4:3c:63:3d:8c:1d:ab:8e:88:13:37:5f:
                    39:58:ff:fe:8e:fb:17:98:d5:2e:c5:a9:0f:89:55:
                    92:de:3e:9b:0c:34:79:2e:71:a8:bf:40:c9:dc:7e:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:05:4A:64:2D:E9:19:E3:0B:EC:EE:18:15:1C:CC:CE:93:84:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:25:12:03:40:29:f6:34:f8:bf:e3:3c:c2:d2:58:b3:24:
         2d:de:54:5a:0b:c6:08:44:ec:b4:4c:10:6f:37:74:84:65:86:
         a8:ab:20:36:30:8f:8f:dc:57:6f:9e:4f:06:8c:15:25:e3:99:
         bb:e8:62:13:ab:b4:66:e7:50:01:dc:0c:7e:28:dd:73:64:3f:
         cc:58:9b:e8:0d:e0:74:23:f5:b3:55:47:be:52:a3:86:30:30:
         4e:b2:23:95:fa:50:f1:bd:30:f3:b6:dc:3a:0f:14:77:37:c2:
         75:5a:9f:69:fb:60:27:bc:1f:9f:e3:a0:60:3d:1e:09:82:ed:
         d7:93:3d:78:3e:2c:47:a8:42:b3:07:da:4e:3a:46:94:e6:e1:
         4f:fe:e1:93:e0:32:f0:d1:4e:48:7d:76:c5:b2:ff:1d:58:fd:
         72:1f:67:b1:87:1a:86:88:8b:45:60:1c:53:5a:99:03:23:84:
         3b:ed:7f:84:a1:54:4c:55:67:1b:6b:e8:e3:ee:6e:22:49:2f:
         58:ce:c1:a7:37:ce:b1:f2:31:f4:16:7e:29:47:cf:b7:dc:b9:
         05:72:7a:3d:ab:86:9e:fd:0f:8e:63:8d:13:3e:ee:60:91:98:
         54:d0:13:31:f9:c8:01:1e:c7:fa:57:3a:5b:1e:5b:af:91:d3:
         18:f3:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org