Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
File:                     73593fb5-6e33-3b47-af5a-76760132089b.roa (raw, json)
Hash identifier:          kcR6yDmrsjnYNh7iDEQPzT6x3E1KJS+i6S6FUBGQddg=
Subject key identifier:   37:CE:1C:18:8F:7A:D8:F1:38:94:7C:1B:3F:14:B4:C9:E3:32:CD:39
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F43285847ED24C9691FA98EE6D96769C0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     16509
IP address blocks:        63.140.40.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          66.117.17.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.236.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c9:69:1f:a9:8e:e6:d9:67:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=827fd2bf-4762-4cfd-8fd4-e76d82b51fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:00:12:3a:f1:13:98:b0:7b:99:42:da:8b:
                    b8:10:7d:a4:33:a0:ba:e2:85:bb:ab:e9:55:d1:40:
                    9e:07:fa:3c:04:e2:19:5f:38:81:68:09:b7:5b:1f:
                    a4:6c:b3:f3:fc:ce:ad:3a:82:d8:83:3a:e4:cc:32:
                    a1:0a:79:60:f6:25:55:84:87:21:94:21:b1:a6:61:
                    71:e2:ff:57:c9:09:2b:4f:10:5c:66:50:10:27:73:
                    29:21:12:67:36:22:14:bd:31:02:46:ab:55:51:bb:
                    b0:5d:f8:78:bc:80:81:d6:ff:9d:3a:c4:65:57:c4:
                    07:26:49:31:af:5b:93:08:4a:f1:6d:03:f2:5e:7e:
                    97:ef:fe:6e:80:78:c8:58:ae:cf:1b:67:4d:87:ce:
                    55:59:17:41:cf:45:6a:c4:ef:b8:6f:fa:72:03:5c:
                    6b:57:99:30:52:fc:21:7f:2b:48:48:85:c6:da:ac:
                    8d:7f:c8:76:89:b5:8f:c9:d7:e9:14:d0:95:9f:2c:
                    52:9a:33:99:3e:12:38:d5:5b:6f:d8:f1:24:a5:fd:
                    05:a0:86:50:3a:d5:00:c2:9e:8a:c0:43:dd:2d:54:
                    f2:59:7f:95:f1:f6:7d:f6:8c:8d:e5:18:56:37:fb:
                    f4:fc:93:cc:ca:d8:2d:22:1c:ad:d0:b2:a9:55:b4:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CE:1C:18:8F:7A:D8:F1:38:94:7C:1B:3F:14:B4:C9:E3:32:CD:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.236.0/24
                  172.82.238.0/23
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:df:30:0e:d7:fc:cf:f5:ad:a3:ab:2a:5b:e8:22:4b:db:
         24:4f:3c:8a:23:71:fc:df:c5:c6:12:f0:32:d4:ea:44:c0:8d:
         93:fa:e4:5f:9f:a9:52:41:0b:90:ce:2d:e8:3b:58:cf:2f:f5:
         39:f7:91:2b:ec:f8:f9:99:7e:90:2e:8b:c4:64:11:1c:e7:04:
         17:f0:b2:db:cf:07:5b:69:4c:b4:40:05:78:cc:1b:47:c0:ad:
         90:bd:5e:d8:6a:21:f1:a3:9f:5a:fa:fb:e7:2c:47:b4:4b:b8:
         2e:c4:75:1f:36:35:4c:f7:02:ec:b0:09:e8:f2:d6:a9:ff:9f:
         b2:b3:ae:ff:2c:32:71:72:08:56:42:ab:11:fb:de:5c:89:4c:
         60:03:58:aa:0c:7c:27:12:5e:f1:a5:94:d6:55:10:b5:6e:3f:
         41:e8:86:a4:5f:76:8a:f0:65:b5:8c:10:b3:98:e3:0d:59:33:
         c7:83:bb:e3:55:21:3b:4c:fc:87:a8:08:42:e6:7d:62:31:87:
         8c:42:6e:8f:dc:ea:f0:fa:31:43:fb:63:9f:0f:fd:d0:cb:bd:
         14:ee:83:02:0a:1f:cc:72:fa:4c:42:de:1f:6f:01:fd:cb:05:
         40:8a:b1:70:7d:73:38:1a:a7:24:a7:a6:ed:f0:bf:48:f3:1f:
         38:f3:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org