Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec701501-f9f2-3385-be3c-0ececee84051.roa
File:                     ec701501-f9f2-3385-be3c-0ececee84051.roa (raw, json)
Hash identifier:          +CZq7ZvC/iWnZN9kGq1sbFR/rPiMG3TVBJxDRHkNkNA=
Subject key identifier:   50:C7:DA:59:3D:6B:47:D8:E7:74:79:44:30:DD:B1:07:24:B7:F9:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094F03B4555549B71BB4D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec701501-f9f2-3385-be3c-0ececee84051.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        107.167.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f0:3b:45:55:54:9b:71:bb:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=41fb2174-beab-4589-b6fa-3b6d6abb1908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:b8:88:cc:05:8a:4d:83:b5:30:d0:9d:2a:
                    a9:54:1e:d4:f7:7f:97:21:29:cd:cf:88:e3:ad:d7:
                    01:3d:14:da:14:bd:e5:29:75:8a:fc:65:7f:0c:2b:
                    05:c8:ad:de:b7:43:cc:72:3a:39:2c:3e:8d:09:4a:
                    19:91:23:ef:89:f4:5b:a0:78:a8:d9:4a:de:a4:1b:
                    a6:f6:71:f3:3d:61:9a:d5:01:13:08:9f:82:27:69:
                    bb:3f:3c:54:da:b5:f5:97:a6:bd:82:0c:01:b8:e0:
                    58:b6:89:b7:b6:e8:23:d9:6a:b0:15:2c:0a:03:d1:
                    24:23:9c:23:1e:b6:d6:51:b6:83:83:26:b8:53:ae:
                    f3:c2:1b:1b:8b:19:fc:ed:d8:20:39:bc:ab:c1:0b:
                    65:e6:28:da:71:a4:6d:29:dc:81:77:58:4c:7f:8b:
                    5d:2a:d0:76:a2:65:18:da:e1:7f:03:7a:a5:55:81:
                    d5:7d:71:e2:7d:7d:5f:e3:52:2c:6c:59:76:88:c3:
                    b5:04:ab:4c:22:c6:ff:00:8b:3a:a1:d9:fb:ec:ec:
                    f9:c7:f8:e4:29:4d:c4:8c:0e:73:aa:a7:3a:ce:9c:
                    af:c1:3c:af:d0:ca:70:40:09:52:a8:7d:1f:9e:6b:
                    19:2c:6f:e2:63:c1:e4:45:a9:8d:a6:f8:13:6d:9c:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C7:DA:59:3D:6B:47:D8:E7:74:79:44:30:DD:B1:07:24:B7:F9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec701501-f9f2-3385-be3c-0ececee84051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:2c:f5:d3:46:78:64:77:49:5a:2d:8b:41:71:ea:dd:b3:
         e3:da:35:1c:62:5f:41:be:94:bb:36:a5:74:ae:6c:8f:09:c3:
         7b:b9:55:55:a9:74:5f:d9:78:a9:68:b6:6d:78:75:bf:d5:d7:
         ad:22:38:83:71:86:46:5f:34:5b:d2:cf:fd:62:43:1e:1a:c5:
         ea:bd:e7:8c:c1:7a:ab:03:a4:cf:e3:90:a1:ff:f7:25:2b:92:
         3c:83:f3:63:9e:1d:94:54:aa:66:15:21:e2:76:c7:66:9e:96:
         43:f1:19:1c:12:08:7f:f7:90:81:41:ea:b5:3c:c4:e4:61:bd:
         bf:db:3b:cb:c5:a0:dc:64:d7:4b:34:68:f0:c6:9e:ef:de:f2:
         5e:f8:9e:1b:18:66:cb:e7:1a:fe:eb:3e:e8:97:3b:6c:25:ed:
         9b:02:8f:da:26:29:a2:d4:1f:53:bd:a8:0d:83:6d:64:91:53:
         e5:11:2d:00:da:26:3c:0c:5b:9e:92:7b:5b:0b:1c:7d:94:8a:
         3a:34:8e:1a:fa:a7:1c:09:2f:3e:aa:bc:1f:16:29:1a:77:eb:
         8a:9e:1e:91:7c:7d:14:a3:b9:9e:bb:ed:b8:23:b7:ba:49:27:
         72:36:a8:ed:8a:18:9a:9c:00:3f:55:2a:5d:6f:98:d5:29:0c:
         cc:26:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:06 2024 by rpki-client on console-fra.rpki-client.org