Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
File:                     dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json)
Hash identifier:          5uLcF/pnB/Z7XOhvaiqZwN6vRvi2p598VwGaFip67Jc=
Subject key identifier:   A1:0F:30:A9:11:EE:A9:0E:5B:C9:44:55:B6:94:BB:27:9F:F2:FA:7F
Certificate issuer:       /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial:       010D0C9F43285847600B9F1B9971683C9F134D00
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        192.31.9.0/24 maxlen: 24
                          198.17.99.0/24 maxlen: 24
                          198.22.152.0/24 maxlen: 24
                          198.137.234.0/23 maxlen: 23
                          199.74.244.0/24 maxlen: 24
                          199.79.216.0/24 maxlen: 24
                          199.89.132.0/23 maxlen: 23
                          199.89.158.0/23 maxlen: 23
                          199.89.160.0/24 maxlen: 24
                          204.89.153.0/24 maxlen: 24
                          204.89.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9f:1b:99:71:68:3c:9f:13:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=7aa0fa75-9942-4a43-b78f-fb3fbe0123b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:a9:aa:f4:36:74:d0:37:ff:16:77:f3:c0:
                    9a:24:a5:5d:72:47:1f:9d:7f:91:6f:cc:37:61:c3:
                    68:b5:87:97:dc:5d:be:fa:34:02:cc:56:f9:e7:9c:
                    7f:5f:b5:eb:ed:86:ee:46:20:54:5c:6b:3f:d7:a4:
                    0a:07:d2:10:17:47:7e:bc:53:ac:3c:20:d1:33:86:
                    7c:3b:28:54:5b:ba:32:cb:8a:50:69:1e:8f:c3:30:
                    f0:fd:4c:57:c2:13:07:9f:cd:4d:e2:1b:f9:09:e7:
                    eb:d0:20:64:b3:3a:82:51:55:5b:8a:44:f9:9f:2a:
                    e2:e4:44:fe:cf:58:17:66:a1:42:ad:c8:7b:fa:1b:
                    80:c7:61:5a:65:54:6e:01:43:a1:b6:f6:67:43:8c:
                    b5:ac:20:f1:5b:e0:77:b1:b9:f8:ec:35:75:87:83:
                    79:1b:43:80:21:2d:ff:3f:36:c1:76:ce:d6:ef:ee:
                    13:4b:17:bf:b6:af:a0:92:a1:3c:99:b1:9a:b4:c1:
                    0b:88:18:88:fd:5d:b7:01:d6:fb:23:65:d8:af:78:
                    44:82:1c:45:18:b4:4a:79:bb:69:b9:42:10:75:6d:
                    56:10:d8:20:0a:8b:81:6c:d8:a0:71:8a:44:48:56:
                    2e:f6:a5:79:d1:c4:e5:53:79:1c:7c:8b:a2:b9:68:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0F:30:A9:11:EE:A9:0E:5B:C9:44:55:B6:94:BB:27:9F:F2:FA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl

            X509v3 Authority Key Identifier:
                keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.9.0/24
                  198.17.99.0/24
                  198.22.152.0/24
                  198.137.234.0/23
                  199.74.244.0/24
                  199.79.216.0/24
                  199.89.132.0/23
                  199.89.158.0-199.89.160.255
                  204.89.153.0-204.89.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:1c:66:20:0f:96:45:14:f3:2f:57:d5:b2:9f:e5:d0:7a:
         1b:9d:21:a0:af:93:ea:82:d2:50:17:7f:38:59:35:5a:88:91:
         ff:2c:d9:10:ad:84:95:cf:45:ec:39:d4:41:a7:16:67:03:ab:
         1b:3c:00:7a:8b:81:d4:6d:9c:fa:59:a5:a0:74:cd:6a:5e:35:
         9d:25:2c:39:c0:27:8d:97:cb:8e:f8:1d:0f:53:24:58:84:79:
         46:ac:da:28:18:3b:fc:84:8e:fe:58:eb:a9:bb:b3:94:15:e6:
         3f:b2:2c:ec:f8:87:e3:a9:40:28:db:10:98:25:86:67:d1:5f:
         6c:93:6a:69:44:46:19:8d:a1:c2:a7:b5:55:b6:6f:24:f0:65:
         bb:67:f1:33:fb:7c:48:c5:a9:c1:9a:f8:9a:6f:6a:66:83:57:
         d7:10:5e:8e:60:d8:9d:76:c8:96:39:da:3e:02:0c:46:60:a2:
         7b:f6:54:1e:da:be:06:34:dc:50:98:2c:4f:19:52:4b:bf:8f:
         f7:4e:2b:ad:d6:de:c9:6b:3e:dd:9a:80:88:2c:9b:f7:9a:5f:
         ab:af:b8:a4:c1:30:da:4b:7e:c7:a1:8c:c4:47:fa:22:59:3b:
         96:d5:db:c9:93:33:bc:66:df:4e:f6:ba:09:23:38:52:31:3c:
         40:23:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org