Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
File:                     15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json)
Hash identifier:          GehiTFREwxsdj5lk+ws8uCjXbo9FZNGIZXDtYyS6/4w=
Subject key identifier:   0B:92:ED:C5:52:DD:B6:17:2E:FF:8A:93:91:E9:E2:ED:DB:FE:AF:AB
Certificate issuer:       /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial:       010D0C9F432858473D25E0DF3824585FD4CB7140
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        208.91.36.0/24 maxlen: 24
                          208.91.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e0:df:38:24:58:5f:d4:cb:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=8704d199-2a2d-471d-a702-3604fdce5a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:35:e9:4a:b2:22:51:bf:59:96:17:61:2a:
                    9d:20:61:7e:d2:e7:9c:74:98:3e:be:3b:e6:5c:c3:
                    50:60:52:7e:bb:c4:08:d9:c1:91:e0:2e:dd:cd:8f:
                    86:be:86:91:a0:2d:14:1e:25:9c:b1:0d:96:4e:fa:
                    1d:71:0f:33:d9:4f:ae:c9:2e:65:ce:af:e1:33:47:
                    46:7b:c3:53:80:41:59:7e:90:1e:28:ad:15:2a:ce:
                    49:eb:49:77:cb:a1:df:66:75:49:52:1e:b8:4c:95:
                    0f:d0:69:ef:63:18:1a:52:a6:97:a2:63:f7:42:35:
                    9d:ed:00:98:7f:3c:8b:ef:28:ea:f7:1d:cd:7a:f8:
                    6e:09:23:2d:ad:32:bc:68:ff:69:b6:da:c8:9a:38:
                    32:ca:e3:28:45:d2:db:3f:2f:ca:8a:d6:f6:4c:b5:
                    f9:a0:28:44:c3:46:1e:99:87:3f:64:f2:d0:7b:40:
                    26:24:82:65:97:4e:6d:1f:02:82:8f:ce:da:09:96:
                    8e:39:e9:f7:ce:69:32:e0:d3:54:c7:f4:50:f9:81:
                    6f:74:42:94:f8:8f:92:5d:c5:16:ea:70:c6:77:0d:
                    8d:e9:0a:d2:c0:09:76:3d:d8:d2:f9:cf:fb:b3:4d:
                    55:75:8d:a1:3e:87:4c:08:e7:72:9c:24:76:0c:a3:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:92:ED:C5:52:DD:B6:17:2E:FF:8A:93:91:E9:E2:ED:DB:FE:AF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl

            X509v3 Authority Key Identifier:
                keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:92:69:c4:9b:40:0f:9f:d2:d8:57:0f:c7:52:be:b1:66:
         ab:95:38:25:b2:87:e2:7e:39:b7:eb:d2:00:89:fe:3f:75:9d:
         53:b2:cc:3a:fc:c1:af:d6:03:9a:67:75:11:80:23:04:db:61:
         43:07:53:ad:a1:68:bd:78:74:5e:cc:51:c4:ca:d6:46:4d:99:
         e0:01:46:4b:75:a5:e7:d1:1b:6d:fd:a7:60:2c:97:38:8e:a0:
         f4:df:64:ab:f1:f3:75:81:f1:cf:df:57:21:d4:4c:d3:47:a3:
         9f:b1:c5:35:76:ba:22:d3:f6:64:b6:1a:ae:74:bd:ce:ee:85:
         e1:72:07:01:2e:bf:f5:d0:66:06:ad:88:02:0f:99:59:b4:3f:
         bf:43:c1:f2:c2:27:bd:74:4a:cb:4a:0b:14:94:61:39:c8:1b:
         1b:f5:49:57:92:69:73:92:e6:eb:ed:02:ba:ba:0b:09:53:26:
         69:9a:fc:f6:95:e1:55:8e:1e:6c:d4:a5:79:f1:9c:4c:e2:d8:
         56:e3:76:2b:5f:3a:6a:b4:ac:be:b1:19:3b:4e:b0:de:61:17:
         c5:68:eb:58:f9:77:89:29:d4:22:08:c1:0b:a5:38:40:d9:e6:
         00:ef:58:6b:da:22:41:89:15:99:03:54:1b:de:10:3a:39:f6:
         7f:c4:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org