Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
File:                     ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa (raw, json)
Hash identifier:          Z1BVax95llQK7bNuyykTgZIqrow62miiua/Tf2XG3cI=
Subject key identifier:   21:AC:56:20:6E:37:EA:D1:81:F8:A5:C8:9F:08:1C:4E:E4:97:8B:4C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858475BDB86830A2534C66A0CE200
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        136.22.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:86:83:0a:25:34:c6:6a:0c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=9aac6cbb-a6e1-4b23-95c9-2450ba338bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:ed:d5:94:cc:07:71:dd:0b:0f:16:5c:08:
                    25:58:43:80:c1:a0:59:cf:24:ff:66:dd:3c:b8:3d:
                    dc:f6:f2:cb:17:e3:7b:2a:a5:ab:64:2d:ef:94:cb:
                    40:ca:1f:fa:b0:9d:ed:22:70:97:3e:1c:b3:f4:61:
                    5a:eb:18:10:58:6e:16:8c:a3:01:44:20:eb:74:c7:
                    f8:8d:74:d8:42:10:69:db:07:5e:33:f0:85:73:1c:
                    45:c5:ef:a0:2e:e8:2c:e0:76:ad:68:d6:10:b7:7a:
                    53:10:b6:35:cb:11:cc:f4:77:10:c9:61:9b:d8:49:
                    7b:b6:2b:40:b7:51:4d:2a:51:14:e5:34:f3:97:db:
                    f2:01:d5:cf:ed:e2:c8:c9:4a:83:0e:24:3f:7e:dc:
                    e5:55:46:17:32:10:2d:09:e2:c3:c7:5c:6b:68:92:
                    1a:a6:8d:8c:76:ed:23:87:b0:12:92:8d:0c:2b:4e:
                    38:69:65:78:cf:ad:f8:9c:fb:19:ab:53:3f:35:22:
                    43:0f:c9:f3:ef:ff:09:d8:17:c6:cc:9c:f9:67:43:
                    1e:b5:fe:7c:3a:05:36:4b:e9:e0:60:a5:09:34:fb:
                    5a:49:25:72:11:68:8e:16:4b:74:37:dd:a4:45:2f:
                    49:2f:78:95:38:85:18:19:e7:1c:4c:a5:db:53:bc:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:56:20:6E:37:EA:D1:81:F8:A5:C8:9F:08:1C:4E:E4:97:8B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:df:f5:10:c6:c6:70:0b:42:64:56:35:37:67:97:5a:f2:
         e5:b9:6c:51:7c:5b:0e:bc:3c:36:6a:86:00:0b:9a:25:42:c0:
         0b:2d:1e:0b:32:af:f5:4b:ab:1d:1a:91:28:cb:f0:8b:d4:19:
         f7:cf:45:54:83:73:43:5b:96:e9:2b:64:45:06:b2:02:d1:2a:
         b2:29:c8:3a:00:2d:ab:23:54:e9:a3:63:69:b8:ad:8d:1e:1f:
         a4:d6:7d:11:d5:fe:63:f5:7b:17:31:3e:5a:ad:9e:2f:d4:2b:
         f6:2e:d7:e2:bb:71:2d:8c:94:18:81:a6:ff:83:a7:e0:49:8f:
         27:ee:d8:16:64:cc:27:66:01:8b:32:70:18:be:ba:ca:3f:1b:
         ae:40:71:25:82:f1:26:b1:5e:9b:89:4a:58:7d:8c:86:37:e2:
         e0:66:6a:19:04:44:2c:39:39:27:4a:c9:0d:30:8a:16:39:a6:
         58:aa:89:13:45:ea:a0:e4:ae:38:67:c3:9c:a4:11:9b:35:91:
         a6:90:e2:76:11:5c:9d:f3:7c:dd:62:69:91:b5:c8:3a:6a:3b:
         80:ff:d1:10:26:69:cd:4c:b2:c3:bf:ea:3d:25:10:f9:19:f0:
         80:8f:d1:a9:2e:4e:0a:fe:3e:b5:6c:9a:97:80:16:83:a1:9f:
         48:55:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:35 2024 by rpki-client on console-fra.rpki-client.org