Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa
File:                     ad74458d-89f9-3870-9155-8651e7e7bf95.roa (raw, json)
Hash identifier:          oQiJ6y+H9ApQuzz+M+FWMxV3Uxujwi/V/+7QSrA6F7s=
Subject key identifier:   91:20:79:E6:17:57:54:A7:CC:BC:9F:62:DA:1A:DE:89:0E:90:75:2D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858475646057FDEEB3C630CA8ED00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        199.182.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:05:7f:de:eb:3c:63:0c:a8:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=9c2ee271-bb2b-4172-87e9-f9fc53cab5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:54:7f:5e:a7:1a:53:6e:32:cc:e7:9a:ff:
                    9f:f5:53:f9:1e:69:ce:60:29:8f:75:ba:ff:ab:ec:
                    8d:37:44:80:13:26:49:0c:c1:ce:0c:31:34:9e:8d:
                    af:e7:c7:46:b4:31:cb:db:5a:30:60:ed:63:23:b9:
                    ef:a9:a3:b3:e7:3a:7c:76:52:de:41:e9:62:0c:96:
                    e3:8a:60:a0:00:40:ec:28:55:27:5a:ab:d3:5b:0c:
                    14:da:47:12:90:1a:01:c1:61:eb:ac:7a:52:2d:07:
                    2a:dd:59:de:8c:30:c0:97:54:d7:bc:25:6e:d4:4b:
                    2b:5f:2d:d0:7d:78:33:d6:73:fd:ec:e7:43:a7:59:
                    4f:2b:55:3e:90:83:2b:6e:7e:d0:25:27:01:f6:03:
                    5c:cd:af:e8:9d:ff:f6:c5:ce:cd:ef:d7:45:f2:05:
                    78:5e:c2:93:82:c7:13:50:60:17:75:8e:c8:14:15:
                    08:71:e2:12:d8:e0:9a:b7:c9:db:73:ae:b6:c9:42:
                    1f:d2:31:0f:d8:77:39:ed:71:cf:44:6f:76:67:81:
                    70:b7:a4:9e:53:7a:0b:ea:fa:64:37:3d:5b:13:42:
                    3a:fe:5e:57:bf:55:3a:6d:7b:55:fe:45:bf:95:79:
                    ed:c8:fa:4f:a4:c3:98:4c:21:eb:27:e6:44:27:65:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:20:79:E6:17:57:54:A7:CC:BC:9F:62:DA:1A:DE:89:0E:90:75:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:f2:22:c9:f0:73:06:b4:39:c9:87:34:a8:a4:45:22:f7:2d:
         e9:b6:24:85:2c:b1:e1:d2:66:c5:5c:fe:ca:65:1b:64:17:30:
         fc:26:a2:aa:19:fa:9c:1b:a6:3f:02:3f:38:7f:01:0d:d1:95:
         a4:b9:fd:2f:30:8e:3f:f1:95:9e:77:31:0e:1a:43:eb:27:1d:
         67:43:b4:8d:60:30:3d:0c:a8:a6:69:39:3e:48:68:15:e5:67:
         24:bd:77:86:5f:fd:45:83:1d:0c:c2:f3:f3:52:c8:10:fb:bf:
         d3:d0:fe:0a:69:0e:32:83:cb:d8:2d:a8:21:d5:64:2e:9a:bc:
         3d:b0:e5:ab:8e:9a:be:e4:01:b8:a6:af:ea:89:de:3c:40:65:
         2a:11:0f:ec:be:e7:30:52:de:0d:50:35:e0:fe:c9:d2:f0:3e:
         f9:83:86:5d:1f:16:17:98:0b:69:d9:8f:12:71:40:5a:fc:a3:
         f9:0e:71:e1:1f:3c:5e:4e:ff:88:22:4e:69:3b:c5:9c:24:b6:
         84:f3:41:dc:91:e0:20:61:24:f6:7f:dd:61:09:7d:77:79:48:
         fb:25:b0:5c:87:d4:a6:c7:90:07:44:e8:30:df:41:3c:e0:29:
         7f:a0:3f:1a:f3:36:db:56:78:5e:03:3b:33:05:d6:3a:b1:54:
         31:44:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:30 2024 by rpki-client on console-fra.rpki-client.org