Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa
File:                     7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa (raw, json)
Hash identifier:          McfTLMa1sjLOVn0ukMD/dGSszalU6ha0N80QXZF63VQ=
Subject key identifier:   06:56:A0:32:5E:84:64:80:B5:0C:F8:59:8A:CF:8F:D8:17:06:8B:56
Certificate issuer:       /CN=89ee541c-de14-47cf-b4d0-081e933fb330
Certificate serial:       010D0C9F432858477EC10828D1467C76642FC600
Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     53809
IP address blocks:        100.43.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:08:28:d1:46:7c:76:64:2f:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f8ce8f8c-2f5e-4596-b196-1f531cdca0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:eb:c0:d7:60:74:90:68:65:34:56:1f:3a:
                    5f:d6:09:0c:55:0d:51:ea:b1:65:d4:b2:6d:11:7b:
                    f5:12:12:cc:cb:1c:05:b5:92:fd:e1:63:ce:3b:fa:
                    14:d6:bb:49:f4:7f:12:22:bb:8a:91:0c:7b:fd:d8:
                    0a:5f:28:15:a9:8c:c2:b8:60:c0:67:23:92:7c:05:
                    62:70:44:2a:09:c1:1c:0c:b7:bf:b4:da:f3:fd:15:
                    7b:21:7d:fd:4a:02:f4:7c:84:ec:8b:df:71:3a:f6:
                    58:37:2f:08:61:33:26:25:48:31:aa:eb:c3:52:68:
                    12:01:fd:54:08:00:e1:48:43:d1:01:6c:9c:a7:25:
                    ca:e5:e0:9d:ca:49:5f:9a:95:91:85:63:8d:35:73:
                    d8:f3:c2:5f:b7:81:88:bb:e5:b3:45:28:d5:04:d4:
                    5c:a9:08:89:8c:b5:c4:51:26:57:9c:09:b8:ea:f1:
                    3e:e6:73:03:d6:4b:36:e2:73:c0:2b:4d:a1:5a:4d:
                    bf:bb:ff:1e:63:58:09:e8:56:d4:6a:c3:09:64:58:
                    3c:f2:7b:cf:51:e7:aa:0e:d8:19:1e:f5:6e:99:d3:
                    cb:41:ad:31:c1:49:29:94:ad:80:2f:be:86:e0:74:
                    ba:85:32:86:c0:e8:d6:bd:ff:15:1f:4b:b6:5e:af:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:56:A0:32:5E:84:64:80:B5:0C:F8:59:8A:CF:8F:D8:17:06:8B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.43.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:23:f9:f9:ce:6b:f4:48:51:2b:74:29:50:ba:58:99:a6:42:
         ae:67:70:0a:b3:99:43:f4:e9:6a:84:c2:58:20:f6:df:05:ac:
         c9:e9:66:40:fc:46:48:51:d4:00:2e:89:dc:36:04:e4:06:c6:
         85:4c:72:50:a9:9b:71:7e:4f:08:8c:24:45:7b:b0:eb:92:64:
         8a:12:a9:67:3e:70:d5:f6:ea:7e:df:bb:1d:8b:9e:ed:a3:35:
         06:f0:a3:f1:86:3b:14:41:84:c6:b3:bc:9d:a3:8a:f7:e9:60:
         0c:cf:fd:c9:35:f8:d1:25:77:0f:08:a7:a5:a2:3b:e2:eb:ce:
         c5:57:d3:11:ff:18:a5:21:9a:b3:a7:74:a7:ad:74:76:68:f9:
         d8:f7:4a:63:e1:37:b9:bc:e9:25:b0:d1:ac:c1:58:b6:f9:b1:
         3c:fc:75:8f:e7:00:25:3a:a4:07:22:0b:a0:bc:49:30:89:4f:
         7d:fb:a2:96:92:99:b9:54:68:07:50:65:aa:3c:70:b6:89:78:
         ae:46:10:1e:5c:23:e4:3b:9a:2c:d5:5c:47:5f:bc:f1:bf:d7:
         7d:93:46:c6:67:85:16:12:2f:2c:91:1f:05:e3:d3:dd:1d:50:
         c2:dd:18:e8:35:17:f2:ea:65:11:9c:67:fe:32:7a:14:c8:e0:
         46:92:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:47 2024 by rpki-client on console-fra.rpki-client.org