Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b19eb09a-d6fd-3978-8ac0-b968adc0a5a6.roa
File:                     b19eb09a-d6fd-3978-8ac0-b968adc0a5a6.roa (raw, json)
Hash identifier:          xzs3a1US4hJsosMf7q62fAKqVg8i0CPP0pcv1w9kfgQ=
Subject key identifier:   02:AC:BB:F6:42:A3:72:D2:74:BB:D5:DB:98:8F:A6:6B:70:C9:5E:E5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E0404E18AE4460D7F635E7C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b19eb09a-d6fd-3978-8ac0-b968adc0a5a6.roa
Signing time:             Thu 14 Nov 2024 11:10:35 +0000
ROA not before:           Thu 14 Nov 2024 11:10:35 +0000
ROA not after:            Wed 12 Feb 2025 11:10:35 +0000
asID:                     3257
IP address blocks:        172.121.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:40:4e:18:ae:44:60:d7:f6:35:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 11:10:35 2024 GMT
            Not After : Feb 12 11:10:35 2025 GMT
        Subject: CN=fbcc4fe9-8d1c-4e6b-94af-e1943a536bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:19:13:75:70:e2:42:65:72:26:37:32:ee:
                    bb:b3:6c:22:cc:20:12:a9:3d:20:8c:6d:ea:45:f1:
                    ec:18:d7:bb:12:db:3e:6c:dd:bc:f0:00:35:80:39:
                    bb:c9:aa:84:2d:80:a5:ac:db:29:2b:a4:2a:b5:21:
                    05:c7:0f:60:3f:90:80:1d:1a:58:0c:ff:c6:24:53:
                    98:ea:60:ff:02:9a:77:00:26:8b:f1:28:c3:e7:6e:
                    cd:b2:b2:3d:2c:5c:d8:b3:c1:16:e7:29:2d:b3:86:
                    fa:78:f0:98:7c:65:8f:47:9a:ad:bf:67:69:1e:41:
                    2d:07:c6:4f:18:f9:a9:07:c1:d9:67:aa:58:d9:4e:
                    28:71:c6:c1:71:96:08:41:e6:51:1e:4d:49:0f:8e:
                    06:bc:19:2d:8a:f5:89:a1:25:11:ac:00:21:00:d4:
                    16:10:31:ee:7e:2f:18:97:bf:52:87:5f:d1:38:ea:
                    75:cf:72:b3:a1:59:35:0e:d9:ca:9b:90:1c:ac:34:
                    23:f9:35:76:a2:a6:12:8f:cb:0f:e3:15:e5:cc:80:
                    15:b5:48:6b:d5:c6:6d:29:43:16:86:7b:11:47:24:
                    6d:9c:0c:97:73:2e:16:ad:c8:63:fc:f2:d2:cd:68:
                    ea:99:53:4c:a9:b7:bb:7a:b7:4d:87:dd:77:f2:a0:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AC:BB:F6:42:A3:72:D2:74:BB:D5:DB:98:8F:A6:6B:70:C9:5E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b19eb09a-d6fd-3978-8ac0-b968adc0a5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e3:e6:51:ba:9a:aa:04:ec:b7:7a:5f:e4:3a:3c:de:3e:e8:
         48:19:11:6d:50:3e:94:ae:f1:b6:98:b6:5d:f9:f8:74:d3:59:
         89:de:f4:2e:9f:16:e9:d6:03:a2:85:99:5c:0c:2d:9c:1d:c6:
         8d:e8:41:77:bf:40:f8:18:9b:d4:aa:3c:28:e9:b0:5b:7b:4d:
         4a:0f:8e:c3:65:99:ba:ff:b2:1c:db:8d:a5:42:e6:03:bf:84:
         e4:bd:0b:56:5c:3a:a1:fa:6c:89:53:ed:37:b9:be:2e:c3:72:
         b6:cb:f2:97:fd:88:6a:56:60:79:55:53:14:b9:ce:58:b3:ab:
         d1:88:56:2d:bf:94:78:ce:ba:82:96:34:a9:bb:2b:c7:30:8e:
         b1:67:d3:d6:48:1d:a3:fc:2a:2c:33:d7:83:d9:ce:16:fd:c8:
         17:93:89:5a:14:ab:dd:7a:aa:72:b5:35:65:0b:6c:ab:b9:00:
         7b:fd:3c:f1:c8:99:a9:d2:89:06:4d:3c:8a:21:45:7b:31:00:
         6b:fe:2f:77:fb:b5:de:78:43:0d:65:85:07:b9:c0:b3:2a:b3:
         a8:79:ac:1d:1a:5b:d1:8f:4a:5e:6e:0b:97:e3:a3:ce:46:fc:
         82:45:be:83:a6:46:25:44:d8:26:3a:23:7d:75:a3:22:0f:0f:
         4a:84:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:36 2024 by rpki-client on console-fra.rpki-client.org