Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa
File:                     e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa (raw, json)
Hash identifier:          AoRIfXdHpnklaAM85NHl1LlLmCeKJd11dyjK2cpQ+d8=
Subject key identifier:   F1:EC:AD:83:23:B4:5E:A9:F4:61:D7:AA:D4:A2:79:E7:BA:7C:34:95
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584761718C21A15BF9C5CEE90C00
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     400238
IP address blocks:        216.87.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8c:21:a1:5b:f9:c5:ce:e9:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=a602d744-94f8-4487-b32d-1547d1c1898b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:59:21:e9:32:69:28:d6:c5:7d:47:bc:36:
                    4e:8a:95:47:bd:3f:34:80:93:a3:7b:1a:53:b2:7b:
                    be:28:bc:2b:9b:e2:a5:92:2e:77:6f:24:0a:24:21:
                    b8:69:d8:bd:6a:60:ad:bb:3d:a9:a6:eb:81:99:fc:
                    b0:b8:6e:7e:c1:85:cf:e0:23:54:0c:e1:af:71:14:
                    30:b6:8e:f5:7a:2c:ad:c7:29:c2:82:48:9c:57:b4:
                    f2:e1:a5:b3:dc:6b:c7:bd:df:d6:e9:d0:84:61:a9:
                    99:62:83:a7:ac:3c:20:bc:cf:6f:33:87:20:93:f1:
                    88:58:fc:f5:0b:58:8f:ce:af:f2:19:18:79:91:dd:
                    5e:d4:d9:a4:96:71:c5:9d:55:d6:1a:41:b7:58:d3:
                    bd:50:87:b2:7f:9f:4c:bf:ad:cc:67:b9:43:99:77:
                    62:fe:4d:80:3c:57:48:00:cb:80:22:0b:47:c7:67:
                    dc:18:4b:7b:02:a8:fe:94:36:ed:1b:25:7c:67:75:
                    a5:f0:87:2e:73:e3:5d:d9:f4:8a:3a:7a:bd:34:54:
                    91:0b:a5:09:7c:aa:ef:ea:d0:9c:a0:fd:fb:08:18:
                    b4:9e:47:dd:09:3a:a8:95:1c:4f:67:e7:b3:c6:3a:
                    33:90:5b:34:1b:98:ff:e3:90:ac:23:b3:23:ca:4e:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EC:AD:83:23:B4:5E:A9:F4:61:D7:AA:D4:A2:79:E7:BA:7C:34:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:14:1e:3d:70:92:79:31:d8:1e:42:70:7b:ad:f0:87:39:48:
         2a:91:26:06:4b:84:e6:75:ef:f0:e9:03:b0:cf:99:19:9b:1e:
         14:5e:06:44:ae:79:e6:8b:85:09:c1:36:62:21:3c:10:81:8b:
         0e:21:a6:f2:89:d2:e6:90:83:3a:41:4f:31:f6:78:3c:ed:46:
         23:52:c8:8e:fa:21:75:b5:00:3b:3c:c8:64:55:32:19:4e:e0:
         05:72:1d:72:fb:0e:46:50:9a:59:cd:00:1e:3b:de:7c:58:67:
         14:26:ae:85:58:07:90:11:ac:5d:54:ac:4a:52:e2:56:c6:b4:
         28:76:b2:73:69:2b:5b:7c:a1:42:63:f6:3d:26:ca:a0:d9:b4:
         c7:ac:64:55:2d:d8:48:17:93:39:fc:93:ac:2a:20:f1:56:09:
         17:96:44:94:0f:3c:09:5f:41:a2:62:9f:ed:b4:15:80:b1:7b:
         39:51:f7:27:8a:82:dd:72:d4:c1:ea:d3:60:08:f7:d6:ef:87:
         7c:1c:5e:6c:bf:64:e1:32:83:d1:a9:5f:89:46:5c:59:80:e1:
         76:84:6f:96:fc:41:ba:e3:7e:28:b8:7b:ba:a0:a9:47:e0:8c:
         1a:f2:d3:5f:f8:d6:04:81:36:d2:b3:ad:9a:56:2e:e1:37:7a:
         63:45:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org