Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
File:                     bb18ad33-5add-3198-87f4-b7c59f066532.roa (raw, json)
Hash identifier:          nRpYyZ8TuZd1LvGhV0s83jWKl4KZbHTIvfPHR9AW1cY=
Subject key identifier:   75:D4:81:52:25:27:27:87:6F:59:FB:64:91:21:24:57:3D:E3:1A:72
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584799466FCF95B967F726500220
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     29831
IP address blocks:        128.254.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:6f:cf:95:b9:67:f7:26:50:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=0f7571b2-7d92-4084-977e-20eca4ec4f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:75:ba:ff:9d:4c:2c:e6:03:f1:d3:18:2d:
                    97:3a:4f:54:3c:72:88:94:80:77:e7:68:39:de:b7:
                    5c:5e:62:1d:4d:d4:dd:9f:b7:53:4c:7a:9f:47:5f:
                    1e:ac:71:55:3e:5d:fd:88:fc:5d:41:7f:fb:4d:86:
                    66:fa:95:dc:b8:59:1a:30:5e:c2:29:30:ce:c8:56:
                    39:3d:86:68:e7:72:bf:bd:ab:b0:13:6e:19:e2:7a:
                    9a:3f:39:d9:46:55:4a:08:c4:ac:64:eb:92:bc:3f:
                    32:66:a5:1e:50:e4:77:d8:8a:23:6f:75:71:26:5f:
                    00:6c:6e:da:eb:f3:63:c6:c4:dd:30:3b:67:7f:bb:
                    c1:94:a9:d9:81:e9:17:ba:53:10:a0:23:17:65:c2:
                    0e:82:ba:28:bd:d6:e4:4c:c7:a1:10:91:b6:63:71:
                    e1:ad:3c:0d:f9:9a:d7:a7:ea:0d:59:fc:88:4e:f2:
                    79:dd:7e:c6:68:33:06:61:13:f3:eb:46:49:53:58:
                    24:8e:c3:3a:58:75:98:15:29:ba:1b:ac:4d:fb:5e:
                    f0:7e:41:f2:d5:64:12:be:97:41:91:1c:30:f8:00:
                    eb:42:61:c7:82:d6:1e:9a:ec:88:84:fd:81:9e:e9:
                    05:2e:02:a4:d2:ec:30:26:e8:5c:a2:1d:52:1a:12:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:81:52:25:27:27:87:6F:59:FB:64:91:21:24:57:3D:E3:1A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:18:41:10:62:b5:61:0c:a4:9e:ef:1a:d0:90:85:53:67:7e:
         13:1e:e0:96:2a:d9:05:31:83:df:7d:5c:59:c1:83:fc:2a:15:
         75:44:51:e9:4c:3b:f4:64:d1:bf:22:cf:03:f0:0f:04:33:a8:
         ea:c6:d1:5b:98:27:22:d8:95:ca:11:42:9e:97:dd:f2:6b:15:
         7f:0f:2b:ba:75:dc:83:a3:68:12:77:d6:83:99:62:95:b6:cd:
         0b:e8:42:a7:fb:0c:d2:1d:56:44:60:e7:12:16:a9:f2:b9:89:
         8b:9d:18:2b:7f:d9:37:d5:a6:8c:bf:85:66:f7:43:93:16:51:
         97:af:d6:36:91:1c:0d:d7:9b:41:07:fb:b9:f7:2f:8a:9d:be:
         b9:03:41:7d:de:79:d1:a4:ac:62:5e:18:31:d9:43:2a:0d:19:
         6b:63:fe:48:bd:67:3b:89:4f:c5:60:ba:c4:a1:12:fb:01:80:
         b5:82:41:a0:f5:9d:af:04:ca:3e:ba:65:dd:5b:ab:87:ee:ed:
         7e:76:ea:38:ec:01:96:91:7e:af:60:6d:03:7c:95:fa:6e:28:
         f0:bf:ff:fc:92:75:67:a1:ae:dd:a5:32:1a:33:b2:a9:54:ec:
         c8:d3:58:9d:aa:d6:2a:65:58:dd:0d:8b:a7:e4:c2:d9:b2:28:
         22:55:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:02 2024 by rpki-client on console-fra.rpki-client.org