Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
File:                     d14790e7-dd79-381f-8bae-9db9eff096c1.roa (raw, json)
Hash identifier:          iPWEswwd9wn+xhanxTz+s2NLJTJoh0LPffpGso56U5E=
Subject key identifier:   0A:41:63:F5:1E:4A:18:0B:2E:61:F5:E8:54:82:8E:74:B4:82:A4:58
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F432858478CB685E46D495367FA408A00
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     62494
IP address blocks:        198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          2607:fa18:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:85:e4:6d:49:53:67:fa:40:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=c40ae0e9-67ce-41ee-a5d4-52fc6f4521a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:f1:1a:1e:4f:d1:84:af:7d:58:3c:27:4b:
                    d1:e0:cf:9b:ed:c2:a6:e6:a9:54:91:68:a6:da:ee:
                    78:0e:a1:63:00:41:b9:76:6b:b2:de:f8:e6:0b:77:
                    a3:5c:34:ae:43:dd:7f:05:d2:22:8e:e4:6c:5a:0e:
                    a6:0b:c8:f6:a6:ab:83:47:f0:c0:ae:e5:95:d5:ed:
                    8f:4e:77:2b:36:51:e8:51:da:8f:56:3d:64:c9:f5:
                    d4:43:60:77:d5:9d:21:d1:67:d0:7c:52:84:93:97:
                    8e:9a:4d:ba:5d:58:5a:1e:08:41:00:4e:49:86:1a:
                    a5:d1:90:6d:85:c8:73:b7:8c:d9:28:e4:fb:6a:92:
                    44:e4:fc:39:0c:20:8c:33:17:cb:33:68:82:4a:2b:
                    22:d2:59:d1:4d:ad:d7:00:de:e7:20:7d:d6:34:b2:
                    ed:65:d8:ae:d1:2d:87:58:67:06:14:63:69:aa:06:
                    2a:43:c7:a4:a9:59:e3:6a:66:33:56:fe:9a:f6:29:
                    6e:15:0a:db:75:e6:f5:02:84:b3:39:50:c5:7e:b5:
                    f0:1e:43:91:14:3f:91:90:a4:37:59:89:78:17:01:
                    61:37:58:92:ca:45:99:04:e6:6f:27:41:5f:30:c7:
                    0f:9d:0a:fd:01:d3:91:0a:45:ee:ea:82:b1:58:2b:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:63:F5:1E:4A:18:0B:2E:61:F5:E8:54:82:8E:74:B4:82:A4:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.113.0-198.60.114.255
                IPv6:
                  2607:fa18:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:d3:8e:5f:9b:5f:ff:51:59:43:9f:c3:c5:f7:6f:e7:5f:
         76:64:35:92:25:68:aa:a8:6e:47:38:84:ce:ca:01:1e:e2:0e:
         07:19:2a:37:be:82:65:45:4e:3f:af:93:85:f6:26:d3:61:38:
         67:c5:5e:57:c2:6e:49:0e:3c:5d:67:1c:2b:15:63:d0:fb:8f:
         32:2b:71:c4:c6:90:69:c8:a9:0f:7a:19:d1:89:95:7f:32:c1:
         14:3c:67:2f:27:a8:af:f6:ec:22:9b:9a:b3:44:c0:75:49:a7:
         a7:28:82:08:fa:d9:f8:b5:a7:a2:bb:dd:2a:e0:96:f9:53:d3:
         5c:8a:e5:6b:fa:0b:e8:a3:97:f3:85:90:2b:32:39:2b:0e:31:
         43:6b:8f:4c:c7:e6:b1:b3:1d:ea:c9:ca:8c:06:9d:42:41:b3:
         7b:03:65:a0:62:77:6c:80:f4:16:e9:3f:97:06:c5:23:67:58:
         e7:38:18:3c:76:d0:d0:a1:a4:d9:6e:af:c8:6a:e1:9b:4a:bc:
         fd:58:ea:88:bf:89:a1:8b:2d:06:f0:0b:7f:71:e5:90:38:04:
         74:7c:63:da:6e:33:01:36:b0:3d:a4:15:45:dc:b1:68:2f:b7:
         5d:b3:8b:28:8d:0a:9b:64:b0:33:0a:96:4b:c3:85:93:f9:19:
         c4:46:0c:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:52 2024 by rpki-client on console-fra.rpki-client.org