Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60aff02e-1c48-3173-accf-041cebaa19be.roa
File:                     60aff02e-1c48-3173-accf-041cebaa19be.roa (raw, json)
Hash identifier:          4Z1ac4DDly32fNXqYVHZZykbZD6CRb1ZZJQkC8givho=
Subject key identifier:   F1:62:4D:CC:B4:4E:03:4D:CE:B0:0B:35:2B:E0:0B:2B:75:F5:4A:29
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F11D3156BF45039117EFA220
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60aff02e-1c48-3173-accf-041cebaa19be.roa
Signing time:             Wed 20 Nov 2024 12:08:35 +0000
ROA not before:           Wed 20 Nov 2024 12:08:35 +0000
ROA not after:            Tue 18 Feb 2025 12:08:35 +0000
asID:                     44893
IP address blocks:        172.121.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:1d:31:56:bf:45:03:91:17:ef:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 12:08:35 2024 GMT
            Not After : Feb 18 12:08:35 2025 GMT
        Subject: CN=a9efdf3a-bd33-42b2-81fc-731f48dc4ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:b9:89:4d:44:73:6c:d5:dc:ab:e2:a8:97:
                    92:4b:18:5d:53:7c:77:7a:01:12:00:3e:b7:03:37:
                    a0:67:a3:27:a1:ef:fa:7a:67:ef:90:83:44:50:85:
                    78:2c:ee:55:a4:be:ba:84:76:9b:72:09:e8:3e:e1:
                    e8:71:3a:ba:79:91:a1:47:fd:05:bf:7b:88:98:2f:
                    e8:e7:c7:8d:40:ae:85:9d:b7:7c:f1:1e:33:00:2e:
                    12:db:a2:1e:4e:bf:e5:d1:96:70:79:5c:51:e6:a7:
                    a3:95:cc:9c:d5:b0:f2:48:85:5f:9b:e2:82:38:6c:
                    e6:44:f1:63:06:cc:48:1c:36:65:11:be:5c:fb:93:
                    50:b3:eb:99:cc:91:53:e0:eb:e4:4a:80:95:c4:20:
                    fd:2f:1d:b6:a1:27:8c:d5:43:21:4a:d8:87:59:2d:
                    11:4f:b0:57:d1:89:19:07:97:f4:81:86:72:8d:d9:
                    84:52:1c:61:79:2f:28:3a:8e:92:6f:3a:88:7f:30:
                    f5:7b:57:4f:25:e6:90:03:5f:19:8a:0f:b2:77:f8:
                    e6:28:ea:99:94:19:2e:8c:96:dc:4c:f7:96:e0:e7:
                    7a:0c:ae:94:a2:2f:47:c3:49:64:0c:00:c6:11:cb:
                    6d:7f:bf:97:01:96:33:0e:7c:c5:75:20:89:00:4f:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:4D:CC:B4:4E:03:4D:CE:B0:0B:35:2B:E0:0B:2B:75:F5:4A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60aff02e-1c48-3173-accf-041cebaa19be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:89:23:5d:16:b5:39:1c:88:42:b3:cb:28:73:78:c9:18:6f:
         d0:6c:26:3a:94:ff:1a:db:4c:91:d2:4f:bb:7c:cb:0e:99:f6:
         9a:3c:95:ee:27:da:fb:d5:fe:5c:a2:71:8e:f5:64:2c:01:51:
         12:9c:92:15:cd:da:2b:06:5b:3f:32:d5:96:7c:7c:c8:b1:19:
         60:e6:c9:9a:40:17:66:82:98:25:d3:01:97:4c:6a:bc:09:50:
         09:94:ce:3b:2b:8a:dc:f2:9c:6a:f8:23:4f:e4:f8:8b:bf:e9:
         24:c4:63:48:bc:08:58:78:0b:8d:88:e7:75:c6:b1:66:8b:27:
         25:ee:5f:f1:69:d5:b0:0e:ec:00:ed:7c:3d:bb:3d:4b:33:9c:
         ea:f4:33:40:12:90:cb:f8:a8:10:f9:32:e3:ed:36:08:a0:ad:
         09:4d:1b:19:bd:95:23:55:40:92:59:25:3c:3d:21:f3:1e:85:
         d4:4a:9b:c6:67:dc:1c:d9:2f:b7:ac:f2:d7:8e:e9:c5:57:99:
         57:26:59:de:6f:9e:31:49:45:54:1b:72:8a:5a:e2:98:81:27:
         2e:e9:0d:ce:0b:7f:d7:5b:c4:0b:d4:96:41:6a:4f:9a:f2:14:
         1e:89:94:d6:f6:60:ef:66:e1:40:da:e7:28:95:79:3c:46:f2:
         dc:bb:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org