Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/98f21ff5-ccc8-3614-96f2-d7f388d489ac.roa
File:                     98f21ff5-ccc8-3614-96f2-d7f388d489ac.roa (raw, json)
Hash identifier:          ztbDU5OEzvs2Z/zELdeE85CwKwGT2jCwKT05AZs9ze4=
Subject key identifier:   5E:C0:BD:F7:95:77:A2:79:61:12:68:79:7C:A6:30:39:AD:E4:FD:BE
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584765A0EC844CBE661F5E646720
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/98f21ff5-ccc8-3614-96f2-d7f388d489ac.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     19437
IP address blocks:        216.177.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ec:84:4c:be:66:1f:5e:64:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=518b1770-ea47-4433-b8fa-e991b3c95ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:e2:f6:38:f9:9d:f3:c5:d3:55:82:84:f7:
                    a0:49:2f:ea:0f:e0:90:50:3d:14:09:c7:65:6e:ce:
                    b2:de:95:63:80:ae:a3:8c:fc:95:ed:1d:b4:03:20:
                    8c:ec:fb:4f:76:fd:48:08:e6:7e:38:ec:59:4c:c9:
                    9c:77:f3:1a:4c:30:35:26:84:b1:e2:3e:5e:4f:30:
                    d7:0d:1b:eb:27:06:96:89:13:ba:42:d5:b7:4b:ab:
                    41:9d:1f:82:ff:98:82:80:64:51:e6:64:7c:8a:56:
                    06:d5:f4:e6:5d:92:b3:95:5b:b7:18:43:6f:1c:dd:
                    f0:fd:7e:2a:7d:9f:c6:8c:53:3e:fa:17:ec:1f:73:
                    67:10:70:6e:23:88:ce:15:5f:75:e1:93:7e:db:2c:
                    dc:dc:15:ed:cf:d1:3b:17:fd:a9:8c:4b:6e:89:14:
                    ed:f0:85:6c:d4:e9:b3:e2:fe:f3:39:8b:77:1d:86:
                    7c:96:13:79:58:d7:66:e3:62:0b:79:6b:01:38:87:
                    e3:0b:f6:00:8a:02:d3:03:b9:86:fb:08:f3:64:d1:
                    91:25:10:bc:c5:65:dc:67:fe:a5:fd:28:0c:5a:7f:
                    a4:09:c4:2c:0c:96:6d:28:75:c2:0d:3c:0e:91:95:
                    43:92:9d:d8:67:85:0a:5c:bc:bb:68:58:c7:5e:67:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C0:BD:F7:95:77:A2:79:61:12:68:79:7C:A6:30:39:AD:E4:FD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/98f21ff5-ccc8-3614-96f2-d7f388d489ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:8b:b8:7c:78:af:06:30:c4:c0:48:3f:e5:66:c4:0b:59:
         ce:f6:4f:7e:8d:54:8f:ec:72:db:5f:96:cc:49:57:d3:98:71:
         49:f5:83:23:25:ff:4b:a0:77:d8:02:cc:11:2b:5f:a1:18:54:
         8c:e7:6f:3a:5f:c6:0f:f6:f2:b1:95:23:86:a9:32:f7:4d:6b:
         e6:1f:26:fd:27:96:a7:aa:32:79:19:02:2d:cc:e8:d5:a0:95:
         cd:1d:e5:aa:c3:bf:37:d6:a6:48:82:d8:ae:c7:b9:81:38:23:
         9d:aa:be:66:7d:82:db:98:4b:17:92:df:64:9e:4b:46:ad:4c:
         84:f4:03:d5:5f:42:61:27:64:4d:d1:6e:29:14:79:81:e7:bd:
         74:6a:d7:b1:21:ee:23:a0:8c:31:95:ce:c3:32:d1:b1:22:80:
         81:16:f4:47:87:98:b0:b9:96:59:02:d8:2a:58:80:fe:31:2b:
         4f:c3:40:b9:b7:01:a8:b3:ec:e4:ce:0f:74:e1:4f:ab:0d:6b:
         7f:5b:ee:4a:51:75:a6:d2:d6:8b:47:2d:ae:d7:7a:8b:92:85:
         13:4a:ca:db:1f:78:cc:b0:dd:e0:69:80:40:e9:73:21:ef:d8:
         c0:e6:18:18:67:a9:b2:19:24:e2:b9:47:8f:53:68:d6:59:2b:
         75:b3:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:18 2024 by rpki-client on console-fra.rpki-client.org