Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa
File:                     b84e90f8-8554-3fc7-9087-d60abb1233ea.roa (raw, json)
Hash identifier:          Ef5lRe9FTbb5AUKpQN3f+0Y/pe6x48xn67lNIUYZ3AU=
Subject key identifier:   36:6E:40:D5:5B:42:04:CE:1E:78:E1:82:C5:0B:C2:67:C6:7C:88:95
Certificate issuer:       /CN=b2dc77b3-a13a-405a-b7ad-181eab85160b
Certificate serial:       010D0C9F432858473D25F29FA7ECC8655CDC7140
Authority key identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     393922
IP address blocks:        192.139.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f2:9f:a7:ec:c8:65:5c:dc:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2dc77b3-a13a-405a-b7ad-181eab85160b
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=b2188d2e-9e58-4e30-bd53-51a44fe84adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:d9:77:10:14:13:a3:84:8c:61:58:54:25:
                    f3:5c:fb:1f:d7:d2:23:fd:18:da:ee:04:38:fc:70:
                    1c:31:a4:c9:94:06:d2:c5:db:02:36:3b:dc:7b:62:
                    47:22:c6:72:23:a0:c3:1c:0a:a2:d2:b1:5a:73:28:
                    15:78:6e:3d:20:37:ca:78:2f:13:e8:1e:12:71:96:
                    c7:88:ab:44:c7:e1:59:71:39:e4:5f:a8:49:9b:58:
                    94:6e:bc:b1:b4:ef:c1:1b:18:55:3e:81:e9:de:85:
                    87:33:46:ee:1e:91:3c:29:2d:28:22:d0:29:bc:8e:
                    d0:2d:f4:88:16:70:74:3b:98:29:26:7c:d1:1a:e3:
                    03:82:55:db:96:79:f2:c3:68:87:18:46:f3:e7:a4:
                    ee:94:8c:e1:c0:a4:d4:fa:99:f6:11:0e:fd:5e:5e:
                    f9:30:7b:b3:7c:ae:14:7a:c2:a0:94:d4:f3:2c:16:
                    cf:7e:85:ce:ff:73:53:dc:30:c4:eb:f1:7d:b1:3e:
                    86:df:d8:6c:6f:5d:58:0f:ae:11:f1:c4:b2:3c:a6:
                    e7:09:39:3d:5c:7a:aa:24:ff:cc:99:15:45:85:75:
                    e8:2f:c0:f1:d0:ba:6e:c5:e8:ef:ca:98:f8:31:cb:
                    78:08:28:a1:de:dc:75:cb:f1:aa:64:ae:5d:a4:5f:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:40:D5:5B:42:04:CE:1E:78:E1:82:C5:0B:C2:67:C6:7C:88:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl

            X509v3 Authority Key Identifier:
                keyid:FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:da:d6:44:5e:e8:3e:0d:15:7d:e2:ca:06:c3:0c:dd:fc:
         0d:09:29:f9:f0:c7:79:11:43:83:42:88:8d:d2:42:da:29:6e:
         b2:57:e9:29:74:16:30:8c:fa:c2:b8:38:dc:9c:c3:87:1f:98:
         60:23:d8:82:6c:8e:14:aa:3d:3a:f1:af:b4:8b:36:f7:df:68:
         dd:ad:92:80:32:29:fc:d8:18:34:47:c9:9d:eb:b0:65:43:76:
         26:90:2a:57:22:6b:e4:a3:06:c3:a9:f6:42:91:db:69:37:8d:
         2c:6d:0b:06:7e:72:4c:6a:2b:08:0a:3a:7a:de:24:ad:34:bc:
         33:01:8b:9b:2f:ea:f8:61:a3:78:6e:cf:35:a4:dc:80:02:99:
         dc:a7:f7:f0:99:3b:0c:fc:d1:53:44:56:99:ec:f3:58:25:f7:
         f7:38:61:ef:7d:57:8f:9b:38:52:bb:58:fa:82:c2:fb:97:6e:
         7d:7c:fe:1b:32:95:3c:60:5e:83:04:50:d5:1e:9e:85:6d:bd:
         45:2a:ab:83:dd:2b:bd:26:89:e2:0c:b5:35:d1:a5:4a:33:0a:
         16:a0:98:4b:c7:d7:16:04:86:de:9d:e7:1a:03:e0:3f:4a:9d:
         c5:c5:f5:1f:ea:9c:5f:bb:cb:86:1b:6a:df:08:61:7b:0e:71:
         89:19:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:09 2024 by rpki-client on console-fra.rpki-client.org