Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa
File:                     11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa (raw, json)
Hash identifier:          dpsucZFL9DFvw6tS83yoamMfDKcM9UTB4wf01G5Ym+I=
Subject key identifier:   24:72:13:97:94:06:7B:7F:FC:E1:2F:E1:86:09:E3:BA:C3:73:AA:2E
Certificate issuer:       /CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d
Certificate serial:       010D0C9F43285847BAC6A9106D5F47E4B4FC9500
Authority key identifier: D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     8075
IP address blocks:        199.189.36.0/24 maxlen: 24
                          199.189.37.0/24 maxlen: 24
                          199.189.38.0/24 maxlen: 24
                          199.189.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a9:10:6d:5f:47:e4:b4:fc:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=ff25bf70-fd0d-4dac-b722-b50f8d8213db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:d0:ba:cb:51:73:b7:77:3a:f3:b7:c5:dc:
                    82:fa:7d:88:88:8a:48:66:37:12:0e:32:3c:1c:34:
                    97:9d:ec:02:e6:00:d5:b2:92:c4:e1:d0:4e:91:66:
                    c0:d3:e7:e5:ed:1c:38:7d:e4:cc:73:10:38:e6:99:
                    46:d3:1f:c7:b3:8e:73:27:e2:a3:38:a8:7e:2c:f8:
                    aa:84:c8:9f:ee:3f:d5:e1:0c:5e:aa:cf:36:ac:92:
                    5e:02:43:e7:46:70:32:da:3a:3c:85:fd:ae:fd:89:
                    f2:06:3b:05:45:c1:ea:52:00:f6:d4:8f:bc:55:33:
                    99:c6:07:83:6c:6f:8d:bd:63:a8:57:22:7f:5c:26:
                    b1:4c:fc:a7:1e:95:09:40:a0:7a:5a:ba:09:f9:85:
                    dd:be:7f:90:ea:5a:88:55:e6:cc:cd:18:fa:2d:a4:
                    45:4c:12:f3:bb:16:b8:f4:47:40:61:e6:9e:d4:f4:
                    d6:22:bc:6a:c5:91:f0:88:6f:cd:c6:b5:ae:8c:f3:
                    c8:67:d2:b0:58:6c:7e:4b:f1:49:ff:ca:6d:ec:00:
                    64:1c:04:fd:9f:ab:5e:83:9e:50:4c:c8:9b:f0:f5:
                    b7:0a:ef:58:b9:a3:4a:75:f6:e6:5f:be:6b:1c:00:
                    e9:47:93:4d:24:c5:99:f7:eb:26:63:37:df:d8:2b:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:72:13:97:94:06:7B:7F:FC:E1:2F:E1:86:09:E3:BA:C3:73:AA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl

            X509v3 Authority Key Identifier:
                keyid:D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:d6:f4:c6:77:64:30:14:53:a0:85:23:57:88:f7:77:ec:b5:
         1b:34:dc:9b:78:9c:a4:cc:b9:05:0a:d4:a0:65:00:fc:62:24:
         e6:e7:fb:9c:87:63:ce:e2:e3:88:4b:79:8a:d1:08:44:5d:7a:
         c4:cc:b6:ed:19:70:5f:98:3c:58:77:e3:0b:97:2b:19:b2:09:
         77:31:8f:c9:ac:54:9e:76:cc:57:cd:97:d8:66:0f:57:7b:bd:
         2a:65:46:a1:63:67:13:40:3c:2a:be:14:bf:c4:25:bf:37:2c:
         a4:6e:90:02:4c:57:1e:5f:a7:f4:27:68:ff:e7:ef:47:84:fc:
         dc:fc:56:2b:3e:3e:69:1c:d1:44:37:0b:82:83:b4:be:c9:05:
         f7:fd:63:60:e9:26:3a:4f:4d:58:75:d0:ff:da:af:5d:ec:d1:
         3b:94:0c:90:60:a7:b3:81:a6:37:bf:b3:ac:08:20:ad:fa:be:
         4e:a8:f2:cd:9e:75:1f:d1:9e:49:9f:f8:0a:a5:37:92:59:c1:
         2d:14:9b:64:e6:b8:ea:df:8d:bb:0c:f8:cc:64:38:91:1e:4e:
         d8:0c:16:86:e6:5e:fa:c1:8d:cb:97:a0:d1:ae:f4:46:05:50:
         fd:ae:60:fb:45:b4:2d:07:18:5a:b1:c1:62:c5:13:67:f1:97:
         a1:8d:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:23 2024 by rpki-client on console-ams.rpki-client.org