Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa
File:                     d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa (raw, json)
Hash identifier:          jRJ58RevDIxHYoKPchQAIiSB2XHDEGnHfCKqqFUm+hA=
Subject key identifier:   28:5D:02:E9:87:E0:CF:66:93:A1:8F:68:ED:7F:2D:86:85:A9:4E:3E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847DF2F4BF0BE101D7F94125240
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     8757
IP address blocks:        128.1.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4b:f0:be:10:1d:7f:94:12:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=2add13cb-f07d-4c3a-810a-efb1a165b221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:10:f3:34:ab:5d:7b:d7:0a:59:6e:0a:08:
                    e0:82:e6:8c:0d:66:9d:23:21:b1:90:57:f5:65:da:
                    47:23:75:a9:50:6b:12:6e:1c:4a:97:a9:44:10:89:
                    c1:cf:71:dc:42:a5:38:f9:7d:df:e1:f0:80:0f:9c:
                    5c:03:33:64:bb:c5:0d:cf:54:f8:df:f1:aa:b4:08:
                    a2:28:e7:07:93:cc:6a:6f:7b:7a:d8:5d:e5:d5:c4:
                    14:6c:58:b9:fd:d1:95:4d:c7:ea:49:ec:97:32:27:
                    d4:4b:ed:f8:0f:00:3f:28:ed:00:ed:11:e5:ba:dd:
                    ae:29:c3:dc:06:30:ba:27:82:4c:a7:ae:4e:24:73:
                    c8:89:30:80:db:9a:00:b2:99:bb:09:97:99:4c:88:
                    0f:b0:98:d9:e9:b1:21:ed:25:d1:7c:1d:d2:c1:66:
                    fd:16:4d:65:42:8f:1c:13:6b:eb:85:25:5c:eb:14:
                    7d:2d:25:ff:30:0e:75:d9:22:30:f5:c8:83:01:a5:
                    95:5e:66:b2:f9:32:b6:2f:69:cc:db:05:39:d7:42:
                    e2:58:e8:0b:92:6a:11:bd:49:49:cf:d9:0f:02:80:
                    f1:d6:1c:29:df:ea:61:3e:ef:20:72:35:ca:d8:f0:
                    6a:aa:37:f5:3e:e0:be:cd:80:8f:67:a9:78:aa:a7:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5D:02:E9:87:E0:CF:66:93:A1:8F:68:ED:7F:2D:86:85:A9:4E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:90:d8:c6:15:f7:8f:51:cf:81:ad:d1:21:36:d8:9f:88:
         36:6b:18:5f:fb:ad:1f:93:7c:7b:d6:3e:81:f6:f0:9e:3e:9b:
         aa:a8:8c:0a:ed:23:97:95:de:3d:df:70:b6:b0:12:bf:5e:5a:
         2d:5b:a2:6d:3b:0d:96:3a:48:8f:3f:9e:f9:67:a0:3b:fc:f8:
         20:50:b0:9d:02:52:aa:b4:23:d8:99:92:fd:37:9f:be:a4:c5:
         c9:c4:76:ab:42:12:b2:08:c5:85:43:ba:c1:60:ea:76:d2:80:
         a1:2e:0a:20:ff:c8:47:a0:e6:ad:3b:26:2f:53:a4:d2:40:8a:
         fd:4e:9e:dd:a0:32:8d:c1:7c:5e:69:1a:79:90:8a:a0:dd:83:
         36:e3:20:0d:44:c4:c6:05:9f:62:3c:be:89:e1:20:19:1b:4e:
         53:43:5d:4b:82:6b:02:82:db:e6:0a:9d:e4:1c:6f:b5:f3:4d:
         b0:88:65:fa:4a:64:77:64:5b:48:a1:47:eb:8e:48:9f:3c:a8:
         e9:7c:a6:1a:b6:c9:0e:c7:58:91:79:a5:84:8c:8c:a1:83:7c:
         8a:fa:a5:09:83:01:b9:5f:0d:0d:5b:e1:62:6c:52:83:2c:01:
         fe:82:6b:ff:50:32:96:88:47:92:a5:e5:c7:fc:50:3b:1e:34:
         75:95:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:46 2024 by rpki-client on console-ams.rpki-client.org