Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa
File:                     bd103826-0ad1-3153-956b-9812301644f2.roa (raw, json)
Hash identifier:          iG+XDthYdfD3YJJM3/Xow0woY0zwnoJ992sH1dIZsjw=
Subject key identifier:   17:E4:F8:11:09:7E:08:AC:92:1D:36:BF:FB:88:A5:A8:C3:27:2F:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE7FDF3D25649AFD60E29A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa
Signing time:             Tue 19 Nov 2024 13:39:59 +0000
ROA not before:           Tue 19 Nov 2024 13:39:59 +0000
ROA not after:            Mon 17 Feb 2025 13:39:59 +0000
asID:                     15083
IP address blocks:        172.120.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7f:df:3d:25:64:9a:fd:60:e2:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 13:39:59 2024 GMT
            Not After : Feb 17 13:39:59 2025 GMT
        Subject: CN=ff24adf2-a65c-418d-83c0-3dd7eac71aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:a4:c5:fe:61:5e:41:b7:64:f1:7e:eb:3f:
                    49:3e:74:c3:3a:b0:3b:66:64:e6:9e:d5:9a:76:09:
                    71:ad:2d:13:d7:8c:79:c8:2f:a4:55:49:4e:f9:81:
                    46:e0:0a:c5:d0:fd:8e:4e:03:e3:9d:b2:34:f2:a4:
                    d7:5f:0e:b9:c7:ce:10:10:9f:f1:f7:2f:23:7a:42:
                    f2:4e:37:51:d6:8b:31:28:51:0c:81:7b:dd:90:b1:
                    26:9a:00:47:9a:5e:bf:b3:f7:41:25:3a:6a:41:67:
                    f7:25:75:e8:a4:ac:de:60:0f:0c:8c:9f:2b:8e:2b:
                    7b:64:b3:c5:76:ec:60:3b:95:61:be:17:80:78:59:
                    bd:1e:dd:bd:b0:51:69:71:2b:f9:98:98:1a:73:67:
                    3a:6f:57:f9:49:7d:34:58:ae:d6:f1:c2:60:63:76:
                    79:bc:08:53:e7:25:57:8d:58:a1:74:f9:70:f7:f4:
                    d7:d5:13:a0:69:db:e1:27:35:56:01:33:54:f1:28:
                    0a:d1:2e:3d:96:31:be:77:5c:e5:40:1a:46:ce:7b:
                    a9:fa:da:25:8b:c7:ca:fe:11:ae:b0:ce:b6:fc:2f:
                    ee:79:36:2f:32:1f:61:d8:45:36:23:6e:9c:e0:92:
                    33:44:c9:e8:7c:8f:50:63:7f:bf:bf:c2:3b:54:df:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:F8:11:09:7E:08:AC:92:1D:36:BF:FB:88:A5:A8:C3:27:2F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:73:f4:4f:29:96:2e:ec:e1:88:f4:fd:7c:62:a7:06:de:
         b7:13:5a:5d:43:44:d9:7c:a9:d1:86:b5:91:2d:74:ba:ec:2d:
         13:82:8a:5d:ca:a8:0e:73:00:16:66:d7:32:01:f5:09:da:2a:
         d8:25:4a:f2:06:06:48:14:c3:52:d1:e8:17:57:fa:18:11:3c:
         ae:3a:ba:c5:b0:ae:1c:c2:d3:27:97:45:7b:f4:5c:52:25:09:
         6d:88:f2:99:ee:9d:2c:ad:7a:f6:2f:b0:cd:1b:7b:32:e1:85:
         17:46:72:65:bc:d0:be:75:29:fc:77:c4:3a:58:68:7a:8d:84:
         a9:25:6b:81:dc:18:3e:4e:b1:5f:a6:ac:f0:40:9b:04:88:69:
         13:ea:74:d5:d1:c4:45:59:11:4b:4a:b2:03:f5:91:f8:52:f4:
         3c:c8:2f:6c:19:2f:13:aa:48:45:2e:d0:cd:7d:e4:d5:c0:91:
         a9:96:45:14:4b:66:fa:1e:0b:94:68:dd:44:f4:9d:6c:b3:ea:
         a4:ce:3c:0c:fd:80:41:fb:12:34:46:5a:66:cc:17:8b:7c:8f:
         0a:af:4f:bf:7b:6c:83:7d:f9:52:12:49:da:8d:ca:2c:71:ec:
         2e:26:86:aa:76:ef:d2:c8:bb:36:02:fe:0b:b9:bf:47:5f:aa:
         73:a3:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:01 2024 by rpki-client on console-fra.rpki-client.org