Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
File:                     ac33e81c-e21e-307e-8679-630443462c2f.roa (raw, json)
Hash identifier:          bCLzcWvVr6XLFy5bNvcFYJC5jeYS922bZ7e9ZA0Q+Eo=
Subject key identifier:   09:58:17:AA:F0:BA:4B:B4:D0:F2:3D:0A:FB:0D:3B:5D:50:93:DE:D4
Certificate issuer:       /CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Certificate serial:       010D0C9F43285847967BC598292B3835CFE63B80
Authority key identifier: 8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     36081
IP address blocks:        156.108.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c5:98:29:2b:38:35:cf:e6:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=029938f6-3ff3-40b7-9a11-9f15a7eec86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:33:93:4f:7e:2c:75:6d:eb:6a:76:9f:8b:
                    58:cb:fd:13:1b:6f:11:78:6d:66:17:65:17:19:5a:
                    1a:27:19:05:49:a0:1d:fc:28:65:da:9c:33:64:07:
                    1b:34:db:9c:4f:57:32:5f:2a:9a:41:63:a5:21:7a:
                    e1:73:83:da:cc:98:1d:35:02:53:14:7b:00:e4:d0:
                    0e:cb:d0:9b:e4:20:4c:d3:a1:68:13:43:7f:2d:3b:
                    9e:91:2d:c6:bb:6c:06:1e:79:8d:0b:56:38:5e:73:
                    8b:e9:c9:27:87:65:76:66:95:dd:19:96:78:6c:08:
                    1e:f0:69:6f:db:b2:76:f2:0c:a1:e7:a0:a2:30:49:
                    49:6b:29:93:60:be:36:89:e4:95:e7:f8:cd:b3:17:
                    f4:e1:ee:0a:43:6f:e7:c1:31:9b:ae:20:73:73:ae:
                    69:40:c1:ef:e4:47:bc:c7:89:62:66:d0:08:bf:d1:
                    64:10:9b:33:72:c7:fa:a9:88:75:c2:cb:08:14:57:
                    ef:dd:2d:71:9a:e2:e6:02:94:c2:2f:a8:81:f4:51:
                    be:16:74:09:6c:28:a8:58:28:b3:70:b2:07:d0:e8:
                    a7:c9:87:bb:e5:1c:67:08:07:6a:4f:23:22:7e:9c:
                    71:32:6f:46:89:a9:86:0b:6e:66:82:10:0c:f2:b7:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:58:17:AA:F0:BA:4B:B4:D0:F2:3D:0A:FB:0D:3B:5D:50:93:DE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:34:bb:3c:69:28:ab:03:ba:b9:7d:b8:75:ee:52:ab:1b:
         78:8e:30:90:08:53:5a:53:a8:5b:38:14:58:33:2e:6c:85:67:
         33:16:b8:7b:2d:84:8f:9c:10:01:40:53:d7:b5:cd:67:47:63:
         22:aa:6c:ac:7f:cb:40:05:93:6b:f6:e8:89:ff:db:ad:3a:6d:
         11:41:18:d1:90:71:2e:35:87:44:f9:10:cf:b6:19:5b:64:d4:
         98:42:8c:c3:4a:20:a1:a4:18:b2:06:c6:ac:10:bb:e7:2a:cc:
         7c:5d:e4:ef:58:1a:26:a5:e6:9e:44:a9:8c:39:e1:21:f7:b1:
         6e:c2:33:92:84:4b:a2:4e:14:9f:15:aa:fd:46:09:35:46:93:
         20:9a:9b:4e:31:ff:8c:d3:90:f7:c0:13:a8:16:53:91:a6:bd:
         85:07:d8:57:b8:48:1c:70:fb:56:70:d6:f1:2f:01:84:ef:2a:
         6d:7d:fb:b5:e2:ac:8f:e4:e9:82:10:3e:8a:de:d0:21:01:5f:
         92:4d:36:e3:a8:af:11:a5:e6:10:4d:93:48:e3:1d:f0:8c:67:
         34:5c:96:7e:15:a2:75:d7:fd:79:9d:e7:66:0b:cb:ef:1e:cc:
         9c:e0:6a:71:94:f2:26:a0:9a:60:5c:86:0b:5a:75:e4:3e:8e:
         79:95:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org