Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa
File:                     32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa (raw, json)
Hash identifier:          XvTMXC4IxxlkZPU/clJ8R86lNq9YmNWFXsjx7KgvhmQ=
Subject key identifier:   37:AF:E8:B5:9C:34:C4:C5:D2:06:CA:CD:E0:91:F2:DD:4B:75:12:5F
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F43285847DF2F491C7D258C7740E65CE0
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     400380
IP address blocks:        81.199.36.0/23 maxlen: 23
                          81.199.36.0/24 maxlen: 24
                          81.199.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:49:1c:7d:25:8c:77:40:e6:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=6af0f7ca-2d03-4b81-b173-be91aee985b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:2c:d8:66:bb:0d:3a:a1:5b:95:c3:77:f9:
                    53:a2:a7:73:3c:55:95:a9:0f:53:40:74:06:bf:95:
                    59:d0:f6:dd:bd:a1:19:d6:ab:33:f8:af:cd:5d:8b:
                    36:40:77:e0:f2:f0:37:73:ac:55:2a:4c:4e:ae:94:
                    49:27:ae:dd:39:b8:47:93:72:b0:42:fc:dc:00:5f:
                    6a:5d:fb:b2:23:19:70:66:9a:af:6f:6b:63:f1:c6:
                    82:32:40:07:ef:7e:25:56:1a:e2:cb:02:c9:c0:58:
                    36:89:7b:93:91:d2:79:8c:78:c4:93:1d:5b:d5:8f:
                    c1:63:65:2d:55:7f:a3:f3:40:ba:89:87:63:4f:65:
                    1f:b8:8c:04:27:a6:9f:ec:36:d5:af:65:18:a1:63:
                    d2:42:4c:04:48:21:e4:53:09:c6:b9:02:bf:2d:d1:
                    ee:98:bd:76:33:12:e9:cc:86:91:67:ed:ac:68:97:
                    2f:bb:19:55:69:d8:2e:46:b9:be:d5:5b:e5:4d:05:
                    c3:dd:ae:72:56:6c:d7:4a:42:62:1c:0a:f5:49:ad:
                    ee:e2:94:ae:af:df:07:37:a3:01:d2:c0:a3:0f:4f:
                    21:c1:06:72:3c:c5:07:87:5f:ef:15:67:4f:71:01:
                    a9:27:36:2a:3f:d4:19:95:e4:76:e9:46:73:41:83:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:E8:B5:9C:34:C4:C5:D2:06:CA:CD:E0:91:F2:DD:4B:75:12:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:76:f6:e5:e2:b7:07:fc:ba:c6:8e:77:15:02:f2:0c:ee:77:
         c0:0c:bb:48:60:19:56:32:3f:25:34:c3:89:21:f0:c2:8f:b6:
         93:96:46:ea:6f:35:95:db:23:f4:69:10:92:3c:22:d8:66:6f:
         ba:89:1a:64:6c:00:06:1b:9f:34:56:5c:80:e4:0f:3c:1a:51:
         92:11:a2:90:e0:0b:2b:61:34:3e:bc:cc:bc:a9:e6:a4:0f:bd:
         b0:39:b0:ff:e3:b3:20:d9:dd:8b:2e:4b:06:b6:30:d6:93:4c:
         93:3c:99:40:a9:94:93:4f:cc:cd:5e:e7:d0:3f:11:f4:e3:f5:
         fb:00:33:6c:54:e1:b9:1f:ce:22:76:65:1a:f9:c1:ac:45:8d:
         a3:e6:fb:8c:89:42:37:91:b7:98:be:ce:32:c5:be:9a:0c:81:
         d5:c9:6e:f0:eb:2d:b2:3f:42:c0:52:90:73:e1:55:94:dd:b9:
         29:2a:22:7b:2a:1a:5a:f7:88:f2:7a:16:75:ce:c3:bb:85:c0:
         58:af:06:56:a8:9d:9e:8d:1f:95:47:fa:03:c8:09:3c:79:21:
         d9:5d:eb:ec:79:07:cf:f2:90:fd:e0:cb:bb:4e:d4:16:e7:57:
         fe:25:18:2b:1c:92:6d:14:99:23:90:fc:e1:15:1a:8a:0b:ba:
         27:28:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org