Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa
File:                     ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa (raw, json)
Hash identifier:          F7L5J+HnpM4EMAS4TOclfWHSa0Nzw+gebPX0ac9r0S4=
Subject key identifier:   EA:47:AE:8B:32:C9:71:0C:DD:2C:7B:7E:62:AC:CA:B7:FC:19:DA:FC
Certificate issuer:       /CN=6149478e-f569-499b-aa7f-d4e43260a256
Certificate serial:       010D0C9F4328584742BB59CD3058FB5096A71200
Authority key identifier: 82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     398826
IP address blocks:        172.82.16.0/24 maxlen: 24
                          172.82.17.0/24 maxlen: 24
                          172.82.18.0/24 maxlen: 24
                          172.82.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:59:cd:30:58:fb:50:96:a7:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6149478e-f569-499b-aa7f-d4e43260a256
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=b7290338-f885-4e64-9998-f27f946c4f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:52:1a:10:e3:fa:6e:7c:40:48:e7:2c:f6:
                    b9:85:60:de:e3:ac:9e:5a:c3:23:0a:da:99:21:8b:
                    60:82:00:77:b4:9e:f2:98:f9:cf:0d:00:cc:0e:df:
                    a1:1f:aa:10:94:cb:be:13:dc:24:1e:fb:de:2e:02:
                    c1:ed:cc:27:1f:70:88:25:3b:59:f7:c0:0f:49:09:
                    63:f4:15:9d:c1:1c:36:ea:f6:5b:ea:f5:0c:e7:99:
                    ec:14:72:b9:04:98:50:ca:e7:c1:a0:50:e3:bd:54:
                    55:a6:71:2b:36:93:f5:1d:60:51:20:aa:19:7b:6b:
                    f4:27:93:97:49:6d:8e:d8:e8:f7:94:de:5a:8c:f3:
                    1a:ca:78:a2:e3:8f:35:8e:3d:88:66:06:ea:08:4d:
                    69:76:62:1c:61:97:3e:2a:86:a7:15:39:de:37:ef:
                    e5:21:f5:28:26:30:b5:39:b3:f8:70:16:7d:13:4e:
                    a8:39:dd:b1:c6:8f:b5:36:8f:d8:1f:f2:15:2d:a6:
                    dd:02:bc:53:48:0a:40:9d:13:90:10:ee:b1:cc:56:
                    3f:40:54:38:fb:d8:a9:80:c0:20:32:4b:d4:8a:1c:
                    5e:bb:0f:c2:40:a7:a6:51:e4:35:ec:b6:38:e7:b1:
                    ed:f4:1c:3d:78:c3:7f:49:05:b2:c1:36:5b:0b:f3:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:47:AE:8B:32:C9:71:0C:DD:2C:7B:7E:62:AC:CA:B7:FC:19:DA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl

            X509v3 Authority Key Identifier:
                keyid:82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:9f:a2:b4:0d:b3:89:68:c4:cd:a1:9c:28:cd:e9:4e:f5:
         1f:0d:e2:b8:a3:61:c9:0d:59:17:46:36:45:ec:f9:61:ce:c5:
         1c:82:09:d0:5f:75:d4:cb:6d:48:8b:07:2c:9f:15:5f:9c:69:
         04:e6:eb:2b:36:4a:f8:11:39:a0:a9:d0:1e:96:5f:51:42:4c:
         fe:25:0e:1e:ea:2e:77:5e:c0:b7:f4:c5:3c:b3:a5:4c:1e:fc:
         c5:82:79:02:03:84:06:6a:52:1b:7d:81:d7:d8:2b:fb:d9:c6:
         32:3a:8a:b8:d6:d2:0d:33:b5:b2:09:5d:91:03:48:28:79:cc:
         02:d6:4f:9b:d4:02:a8:57:42:d2:86:53:1e:bb:30:86:35:48:
         21:92:6b:52:5f:01:2f:9f:56:a8:94:11:87:24:82:6d:2f:b6:
         cc:f6:70:21:b5:c0:0b:72:a2:c1:5c:cb:01:df:08:76:05:92:
         c0:27:d2:64:bc:6c:87:46:19:a0:63:f5:56:69:f6:6b:93:fb:
         07:2d:0a:bc:5a:92:1b:97:8d:c6:69:09:e5:6d:77:ea:54:a8:
         50:f6:23:ce:6b:d4:f9:ce:98:02:ed:de:4f:cb:8d:94:50:2e:
         04:3b:80:bc:54:6b:8d:ac:da:01:e4:b1:9f:1a:3b:9d:b9:ac:
         ac:eb:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:40 2024 by rpki-client on console-ams.rpki-client.org