Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
File:                     43b63ab6-b85b-3cb0-a726-20010fca26b3.roa (raw, json)
Hash identifier:          WeU3QRqA27ilvSOx4UIBvNRyR9yIX8euiOBt8QZjDV8=
Subject key identifier:   07:28:25:67:61:BF:D4:F1:E4:61:CC:80:8C:08:28:0E:F4:E5:C9:A3
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584782F0FD818AF0E8373447B738
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     46265
IP address blocks:        208.52.177.2/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f0:fd:81:8a:f0:e8:37:34:47:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=acf023c5-5522-49d2-99ec-a6666505c8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:7e:c0:85:19:75:01:27:9f:c2:1a:4f:21:
                    90:25:7f:f9:9e:0c:fa:91:13:18:a6:43:74:4c:34:
                    01:33:11:47:ec:aa:de:2d:63:96:a6:17:c7:a7:4d:
                    b1:88:5d:3e:84:ee:9b:2f:7f:15:5c:77:4c:ad:83:
                    51:13:a5:3f:23:61:29:47:1e:36:d6:3b:4e:54:7f:
                    fe:61:ac:6f:48:3c:19:b2:f2:c6:03:96:73:ab:01:
                    a9:6c:f3:98:b5:85:90:34:22:86:2c:23:2a:0c:71:
                    0a:1c:47:2f:99:4d:77:17:e3:9c:5e:55:a5:ed:ec:
                    20:ef:33:df:69:1a:be:65:54:6f:f2:65:17:23:fb:
                    99:ac:24:1c:97:dd:6a:90:d1:be:6b:0c:72:13:a5:
                    60:3b:7e:9c:17:02:70:86:cf:bd:43:93:1a:e8:5d:
                    87:d6:4f:89:23:54:7d:cf:36:e3:32:e2:fe:17:6e:
                    18:9d:97:95:4b:a9:af:8e:c2:56:b0:37:ba:9c:aa:
                    e0:53:4d:e5:da:97:d8:17:da:96:d9:0e:9e:4e:d8:
                    dd:9d:bd:68:f7:d6:35:e2:e8:b4:15:ec:a8:44:f4:
                    d1:00:af:99:22:a4:0f:92:a0:42:ea:a3:6c:08:7d:
                    c7:0d:91:cd:b7:9f:14:fb:59:b8:c2:86:ff:c4:49:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:25:67:61:BF:D4:F1:E4:61:CC:80:8C:08:28:0E:F4:E5:C9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:98:f8:9a:c0:bb:00:53:b2:db:d7:b7:48:13:95:55:fd:10:
         d0:83:1e:17:02:03:4c:2c:4f:51:a8:50:03:53:6b:57:a6:f8:
         91:df:4e:19:f5:7f:4b:5d:15:5f:88:92:b5:70:9a:57:86:46:
         2a:6f:d7:d5:a0:b7:42:e9:ba:d6:3a:3a:17:f8:e0:57:eb:81:
         38:29:d0:e9:37:5a:d8:ab:44:60:37:77:19:f5:b3:2a:88:25:
         c5:db:57:88:d2:c8:a1:ab:6f:c2:fa:10:6f:a6:b4:26:19:8b:
         e4:9f:2d:ed:58:20:c9:55:41:20:47:70:ab:7c:9f:d5:7e:72:
         00:b2:97:18:28:95:62:a7:dc:b5:07:91:ed:ec:50:9f:b1:a5:
         ba:ff:4e:19:66:e7:09:a3:b3:38:91:51:26:d6:a6:04:4c:fe:
         bc:9d:f4:a0:52:20:38:bb:01:de:70:68:12:16:e2:fe:7c:b0:
         7b:3b:3e:1a:e0:68:37:94:09:3c:13:ab:1b:70:64:0e:07:2f:
         61:d9:da:d6:01:2a:c3:4f:65:db:86:aa:34:b4:63:b7:05:6f:
         24:8d:77:a2:01:d6:77:e1:c3:9b:4b:dd:95:5a:c2:ca:3d:91:
         6e:8d:33:92:94:74:40:85:f3:f9:1e:4a:52:ed:5c:16:96:95:
         cd:e8:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org