Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa
File:                     a8006d90-9db1-3770-bb6a-a49d4decae45.roa (raw, json)
Hash identifier:          YEAGoJYwu1kG4Y4a0kCb4R1qUpetGu1Kn65Y0b2DBW4=
Subject key identifier:   A4:27:3E:A0:6D:11:6B:D7:55:1A:E0:E2:C5:14:7D:4F:C7:8F:82:09
Certificate issuer:       /CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Certificate serial:       010D0C9F432858474420B4F8F16C743775238E80
Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        146.71.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b4:f8:f1:6c:74:37:75:23:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=7f38cfe8-6fbd-4a5f-b8fd-99ef413ff0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:10:67:8c:26:02:8f:a9:4e:b9:23:90:35:
                    66:11:82:1d:46:b0:ba:31:b5:8c:2b:00:f9:13:f7:
                    6e:d1:63:aa:02:38:36:06:05:15:85:4c:59:37:98:
                    70:02:ae:10:69:59:ed:b0:d9:f8:e9:84:f4:fd:2d:
                    53:c6:b7:02:ec:4f:00:cf:d0:24:62:68:f1:8a:15:
                    09:17:a0:1b:7f:77:99:1c:a2:a4:11:ff:d4:29:87:
                    f2:44:ec:2f:87:5b:3f:0e:1d:87:ae:56:75:42:f0:
                    5e:9e:ff:f6:cb:29:ba:6b:cb:13:f2:e3:4c:4b:c3:
                    7a:5d:9e:4a:40:7e:54:82:52:64:19:e1:3c:2d:67:
                    e2:ac:17:c7:e3:81:dc:c6:59:48:ce:92:80:18:43:
                    95:e1:12:ce:c6:04:9a:56:b6:0f:b0:78:7f:0e:42:
                    96:87:61:53:8e:31:a9:af:d2:38:09:dc:96:db:4c:
                    e5:fd:55:ea:7b:3e:71:a5:d8:e4:1b:cf:e8:63:d9:
                    9b:19:0c:c9:79:b1:c6:d1:3d:d1:33:c8:d0:38:47:
                    d6:39:49:22:b3:d2:94:6a:32:84:ae:9f:bc:d4:8e:
                    15:01:f7:28:84:09:39:16:d5:ad:23:ad:3d:90:f2:
                    de:5c:78:df:52:af:ed:62:1c:0c:28:69:01:3e:ac:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:27:3E:A0:6D:11:6B:D7:55:1A:E0:E2:C5:14:7D:4F:C7:8F:82:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl

            X509v3 Authority Key Identifier:
                keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:03:56:23:c7:86:8c:da:06:10:f0:d7:19:77:3c:1e:11:
         ae:10:bc:d8:16:02:6d:d3:bf:2c:4c:dc:ce:93:bd:89:0b:77:
         7c:40:05:1d:7a:05:33:d7:dd:46:ff:08:e8:f6:f3:46:5f:1a:
         6f:85:7f:22:17:c2:96:00:df:c8:e1:58:f3:d9:1e:f4:ec:77:
         28:e5:70:91:e3:20:31:2d:14:ca:78:f0:c5:70:5f:ed:c6:dd:
         24:3c:a0:a1:bd:a0:da:83:47:c5:3f:f1:07:03:cb:13:cb:d0:
         01:4a:d0:36:85:a1:49:90:42:6b:8a:e9:08:72:16:de:d2:af:
         c1:cc:e8:11:d6:bb:bd:65:68:0b:95:f0:1b:20:6c:a4:4d:ee:
         64:3f:50:22:83:fd:59:da:60:fb:1a:55:3d:3e:a2:f5:4f:6d:
         55:c5:31:90:74:e7:ff:c2:6f:24:27:e7:1e:b8:d4:6c:8f:a3:
         d0:11:f5:ab:7b:37:0f:41:30:5d:a1:f9:34:3e:c3:4f:8b:c0:
         5a:d2:27:03:d7:61:09:64:28:70:88:be:b7:cb:49:30:12:da:
         24:cb:02:19:8e:2d:b9:38:2a:b9:b5:13:9d:31:59:b0:08:93:
         a0:fe:71:a0:5a:57:5b:19:78:3d:59:91:64:5c:b3:26:45:5c:
         08:91:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:06 2024 by rpki-client on console-ams.rpki-client.org