Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa
File:                     e799c845-37a2-3edd-820c-f6bf8253148c.roa (raw, json)
Hash identifier:          3qgX8MqosBPgGXWGqf+E9saLOiDd4s3ZhtGOKxvR59I=
Subject key identifier:   F9:21:62:4D:F0:9B:44:3B:9A:01:72:7E:FE:A7:8F:51:94:AC:A2:0A
Certificate issuer:       /CN=046edc58-3188-4be4-bad7-643a593bcf38
Certificate serial:       010D0C9F4328584757AB753BEC4815E6183C9968
Authority key identifier: 31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     52053
IP address blocks:        170.39.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:75:3b:ec:48:15:e6:18:3c:99:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046edc58-3188-4be4-bad7-643a593bcf38
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=e44cd5fb-7df9-4b01-ba8c-b223a393c84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:7d:6e:c4:c0:67:c3:ea:05:6c:54:7d:30:
                    09:58:55:a0:53:68:74:38:fe:55:90:1f:fa:6d:30:
                    31:1c:7e:9c:10:a4:d2:11:f7:d8:53:ec:2c:7c:24:
                    5c:cf:af:cc:ba:53:f2:c6:a8:e4:f3:1c:ca:0d:ed:
                    e7:c3:c3:57:04:a1:5b:0e:53:7f:60:db:35:19:d2:
                    dc:6d:c0:41:f8:3c:5a:ac:20:b5:78:c5:73:fa:ae:
                    0e:3d:b4:bd:74:18:2f:ea:e7:a2:5f:ec:d2:34:6c:
                    52:4a:8d:24:85:3a:90:3f:f7:91:3d:e4:77:2a:43:
                    2f:67:00:4d:ad:c8:bd:fb:64:ea:16:cd:b6:e0:56:
                    5f:68:aa:51:53:d8:5f:aa:38:ec:8a:8c:6f:77:d7:
                    ea:8c:1f:13:f0:79:01:fa:69:d9:45:5e:d5:b4:a6:
                    f2:7c:05:1c:27:fe:95:96:98:64:0a:23:58:df:87:
                    b1:f6:27:5f:8b:4d:40:b5:dd:55:c6:37:81:e4:49:
                    e5:85:ff:21:4d:21:69:19:b2:a8:ad:e5:93:e5:f6:
                    94:a0:eb:54:9a:8e:c6:16:ea:55:fb:8b:6b:92:ea:
                    4b:b1:a6:4a:08:9d:cb:aa:3d:5a:e3:6c:d4:8f:ba:
                    f7:a8:98:e4:67:a1:e2:18:be:e9:62:6f:1e:d5:fd:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:62:4D:F0:9B:44:3B:9A:01:72:7E:FE:A7:8F:51:94:AC:A2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl

            X509v3 Authority Key Identifier:
                keyid:31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:e2:66:67:bf:6a:68:ca:73:5f:9f:62:56:b2:d4:9b:7f:
         9f:f6:ef:00:d8:a6:83:d5:a2:46:39:10:83:07:58:4e:32:6e:
         16:f6:8c:a0:1c:48:de:38:99:0c:2b:76:76:e3:5a:60:a8:d3:
         12:d0:45:a9:3f:b5:f2:07:6d:00:68:ea:e4:dc:7c:f9:3d:19:
         cb:5a:b2:b1:b7:a3:56:cb:27:7c:15:aa:56:0c:20:6b:7a:4b:
         75:be:14:61:b9:a2:d1:78:23:1a:20:37:2a:67:a1:67:cd:ec:
         5e:a7:3e:16:51:83:62:ed:03:92:89:fb:1a:79:b1:de:4c:ed:
         f6:49:27:b1:1c:49:70:31:00:22:5e:73:40:c2:4d:58:67:db:
         aa:aa:ea:d1:68:0c:f3:d9:87:32:53:6c:2f:1b:1e:5a:5b:6c:
         22:a6:0d:00:fa:3a:a0:58:03:a2:2c:ab:07:97:af:17:5c:ce:
         39:0d:b8:77:15:a8:58:b8:38:61:ee:47:2e:f3:9f:1d:fc:d7:
         7b:b8:dc:a1:26:ab:77:76:7e:34:a3:a8:40:2f:a6:1c:9e:fa:
         0e:e6:e9:21:e4:90:b0:b9:35:7b:42:fb:1d:a2:d1:8a:0b:dd:
         c1:37:e2:70:0d:08:cc:d8:49:39:e0:27:ec:ba:56:8b:32:3a:
         d5:36:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:53 2024 by rpki-client on console-fra.rpki-client.org