Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa
File:                     fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json)
Hash identifier:          /Py/NlcXxvGt0OCWY8NLt2NSNiPf3qInldSYyDoXDyw=
Subject key identifier:   3F:65:54:F7:D9:6C:7E:91:75:FA:DB:09:97:5E:5A:C3:D3:F4:96:C8
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F432858475910BB800F0559F3DD4592E0
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        147.124.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:bb:80:0f:05:59:f3:dd:45:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=8fdf30fa-3034-4094-956f-ce60a4333a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:96:32:92:3d:f9:8a:39:de:6a:31:72:b9:
                    cc:b0:c9:44:a9:c4:06:b8:7b:22:77:81:1e:08:82:
                    05:f2:d8:d7:57:b4:6c:bd:e1:26:db:98:dc:38:15:
                    8e:c9:4a:ab:02:9c:1c:21:ce:a0:e5:ac:25:bc:b2:
                    fc:86:a7:52:73:2d:32:35:6f:7c:d6:21:de:d0:03:
                    10:35:eb:61:0e:6b:fb:ac:0c:86:5e:00:c1:02:7c:
                    a6:b9:b8:e6:f7:e4:f1:43:9b:d3:af:68:cc:77:a0:
                    d3:c3:99:6a:60:e2:39:8c:7f:e6:58:d7:c6:04:a6:
                    0d:40:dd:3f:6f:52:48:bc:cf:12:76:6c:c6:52:7c:
                    25:ca:38:94:cd:1f:09:1e:db:f2:a4:bb:cb:84:7a:
                    df:63:e0:44:3f:88:03:c4:3c:cc:33:00:3d:8d:16:
                    40:ad:ee:be:27:f0:62:fb:ac:49:09:85:ea:2b:5b:
                    b3:39:9f:73:3c:99:42:50:79:2e:56:ea:41:3b:f0:
                    b9:eb:a0:22:5f:29:58:3d:5b:c2:4b:31:7d:e3:0a:
                    a4:3c:92:59:08:c7:a1:27:69:c9:cc:ea:97:46:54:
                    36:0b:f2:50:4f:f0:41:0f:f9:e7:c6:79:0f:1d:9a:
                    27:4a:12:9b:fb:fb:59:c0:fb:71:ea:bf:3c:e4:ba:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:54:F7:D9:6C:7E:91:75:FA:DB:09:97:5E:5A:C3:D3:F4:96:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:96:79:1f:ed:57:ed:c4:86:e3:96:91:60:1f:c9:c5:92:7d:
         b2:70:33:99:d3:e9:ed:4e:93:93:9a:f1:1a:8a:88:db:52:0b:
         27:65:0b:62:30:d4:3e:34:61:31:eb:d7:5b:94:52:98:80:5e:
         da:bc:b1:de:ac:5f:66:be:ad:2c:1a:ab:94:49:69:95:67:c9:
         5d:16:b4:da:d6:a0:28:59:da:d2:44:39:70:aa:3c:7f:07:6f:
         06:99:c3:a0:07:28:06:71:12:49:58:5d:61:7a:bf:d5:52:1c:
         f3:71:e8:44:a7:f3:3e:ee:c1:ac:cb:8a:70:52:0b:ea:98:f8:
         99:a0:5e:b3:5b:32:f9:65:f7:dc:5d:53:55:ca:94:c5:b3:ec:
         f0:75:ee:77:6f:7c:34:fc:3b:9f:9c:f6:ae:ce:09:ab:b3:58:
         bb:81:8d:5c:56:d1:83:ea:6d:b2:59:82:74:7a:17:83:31:86:
         fa:fd:08:f4:c9:27:13:3d:0b:7c:55:2e:37:9a:a2:91:fc:54:
         c1:77:63:2d:da:9d:4d:c2:0d:fe:fd:ff:45:93:b8:a3:2b:6a:
         43:25:70:a2:ea:e7:0c:83:dc:39:90:38:e3:ca:a5:11:5a:8a:
         c5:a7:f6:2e:7d:c8:af:c7:45:63:69:f6:aa:f6:54:21:cd:37:
         4a:7f:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org