Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
File:                     7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa (raw, json)
Hash identifier:          haW0t+7MJj6txoStb5/Pl1aYfBhZk20jz3fi+vtLxe8=
Subject key identifier:   CA:FD:63:11:8E:A2:7C:D6:8F:CE:69:A5:96:7A:BD:3B:1D:27:1E:02
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847AB6C1CF1A726D73C793992D0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     21
IP address blocks:        128.1.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1c:f1:a7:26:d7:3c:79:39:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=c947d4f3-8f06-434f-88e8-68f48a622294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:79:14:e6:6f:cb:94:b4:db:5e:e9:0f:47:
                    cb:c5:f2:6b:0f:71:55:6c:35:1b:8a:71:da:71:e3:
                    64:1b:ab:4d:02:f0:62:d8:4a:14:01:2b:e5:c7:12:
                    c8:41:fb:8e:41:c8:c8:ce:df:84:c8:47:77:e0:3b:
                    2a:3b:7e:74:4a:e2:ef:2a:28:aa:19:ed:14:ff:5a:
                    92:73:33:6b:05:69:74:6e:a5:8e:09:ad:45:4b:7e:
                    41:eb:af:fa:de:cb:f8:5e:0b:63:9b:8a:59:69:26:
                    d7:4b:99:bf:22:95:75:ee:0d:1d:f4:7e:ad:f4:df:
                    d0:97:c6:41:3b:7d:e9:1e:4a:b0:ed:cf:d4:ea:5c:
                    08:3d:22:b4:fb:be:30:58:5f:c9:71:e7:29:c4:ef:
                    01:d6:3c:e0:ea:17:f9:57:26:50:7c:fa:68:63:37:
                    fd:3a:14:6e:26:03:c7:7f:6f:e7:cf:61:3b:ce:7b:
                    30:03:c0:9f:62:01:96:4d:81:35:9d:0f:2c:60:bc:
                    2a:11:3d:2c:de:c1:f6:b3:6a:68:7a:d9:75:cc:f0:
                    47:a5:e2:fc:3a:be:a1:36:11:23:f3:a0:f1:d2:e7:
                    48:95:b9:36:e9:ab:78:40:9c:c5:f1:be:0c:b6:39:
                    38:26:a5:fd:3f:a4:b0:b5:d7:ea:de:d0:0c:bc:51:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:63:11:8E:A2:7C:D6:8F:CE:69:A5:96:7A:BD:3B:1D:27:1E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:2a:c0:22:a9:9c:af:1e:9c:10:35:93:83:31:c9:74:c7:
         09:a8:76:44:55:48:37:a9:fe:fb:9e:9c:37:e7:8e:0f:17:8b:
         b0:70:a1:45:c2:a0:6b:da:80:95:92:c5:cd:fc:84:8d:bb:6d:
         49:18:02:b8:3d:22:72:6e:ef:fd:6f:24:ef:c2:a6:a9:13:2d:
         ba:55:2f:51:10:a5:fc:2f:47:be:66:f1:8f:97:14:ef:cb:b5:
         60:f6:22:1b:ed:7a:cc:66:ac:83:64:bd:09:f2:78:95:97:bd:
         bb:64:a1:a4:ad:3d:7c:4e:57:18:05:62:31:af:1d:dc:de:0c:
         a1:58:57:90:16:aa:d7:c4:0c:59:bb:81:30:42:ad:36:ae:3a:
         a2:98:eb:de:fe:35:7e:66:35:a7:42:df:23:9e:fe:95:cb:75:
         71:42:ab:8f:68:b9:55:14:b5:93:ee:ee:61:a6:0c:c9:26:96:
         2b:ff:71:05:7d:e6:6c:22:2a:3c:29:66:a9:20:4f:4b:3f:d1:
         17:e5:89:4c:5f:ac:05:7d:42:57:0e:95:6a:d5:6b:ac:c1:0a:
         0a:34:fd:3c:db:45:1d:aa:f9:92:28:23:67:b3:e0:cc:a3:c5:
         e5:13:e5:8a:1d:8f:e0:66:5f:7c:1d:58:dc:81:42:4b:55:55:
         40:11:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:28 2024 by rpki-client on console-fra.rpki-client.org