Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
File:                     56878942-8a9e-3f0c-80e5-1b964e624fc7.roa (raw, json)
Hash identifier:          6YrhtlzK6tHnpr3q5MlZjR0ictDBncrk0D9QaJXq3j8=
Subject key identifier:   FE:9B:F7:09:88:99:73:03:C2:67:5B:D0:5F:4A:8A:7E:30:DF:56:2D
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F43285848161778C0A69DAC86EBC8E130
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
Signing time:             Tue 03 Dec 2024 18:01:58 +0000
ROA not before:           Tue 03 Dec 2024 18:01:58 +0000
ROA not after:            Mon 03 Mar 2025 18:01:58 +0000
asID:                     16509
IP address blocks:        89.192.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:17:78:c0:a6:9d:ac:86:eb:c8:e1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Dec  3 18:01:58 2024 GMT
            Not After : Mar  3 18:01:58 2025 GMT
        Subject: CN=3e933746-9f1e-438e-a3ed-6ed7b9271c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:c2:6b:16:f3:eb:ea:e7:7e:39:12:c8:32:
                    c9:77:47:91:a7:1b:97:ed:2c:b3:f5:55:8b:40:36:
                    a2:9a:96:e5:a8:7f:51:cb:27:32:26:f6:64:c9:d4:
                    f9:c4:5d:4f:b4:94:81:b3:7b:64:26:8b:d8:98:73:
                    a8:fd:52:e9:c4:84:d3:80:e0:65:f2:b4:b3:8c:01:
                    51:24:bd:96:57:8e:e3:02:43:54:6c:9a:b1:55:87:
                    58:c1:cf:25:4c:ba:76:cc:8e:a7:7c:56:30:54:4d:
                    7b:44:11:9e:a4:ee:cc:f2:83:91:72:48:b1:0b:2c:
                    bf:ba:aa:e8:71:4a:04:d0:54:ce:16:1b:cc:9f:e7:
                    80:59:9f:20:ff:96:d4:1c:77:74:80:4f:5f:6e:32:
                    c4:25:f4:a2:bd:2a:82:ff:2a:e4:c1:4a:55:26:3c:
                    64:59:b4:11:1a:8b:8e:25:d6:22:41:ed:f5:4e:d7:
                    4d:23:33:13:da:fe:af:43:25:4c:1e:1c:3f:48:43:
                    69:b5:98:27:eb:20:41:84:d7:12:06:24:d9:c8:91:
                    df:36:eb:10:14:f6:3d:02:af:f5:8f:ba:2c:89:bd:
                    2b:43:ba:c8:cf:d4:d2:19:b9:9d:bf:ca:32:ba:cf:
                    d7:51:8f:55:c9:d7:2c:29:87:dc:33:69:bd:65:f7:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:F7:09:88:99:73:03:C2:67:5B:D0:5F:4A:8A:7E:30:DF:56:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.192.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:6c:95:0a:65:c5:4e:57:9e:63:23:91:e8:51:4d:b5:31:
         41:5f:48:ac:c9:db:f5:d1:10:04:4b:57:3a:7f:17:b4:2e:49:
         a5:b5:38:85:a2:0c:22:6b:57:a7:3b:13:d5:77:d5:38:5c:e4:
         ff:04:2c:c5:c9:81:95:68:c2:6d:79:1a:2c:70:82:fe:6c:5c:
         20:69:3e:34:1b:7e:f6:59:c1:60:34:fd:ed:1a:ae:70:fb:7f:
         5e:b5:3c:3d:5f:38:3d:7a:74:82:af:66:ef:36:16:d8:3c:d1:
         e6:91:81:64:b7:e9:cd:c2:61:59:b3:76:38:6b:41:8c:9c:cf:
         84:c3:b9:6b:b7:48:d4:08:bf:f1:d4:17:28:e7:9e:a0:6f:bc:
         cf:6d:cf:3d:f6:78:2d:6f:79:e6:06:2b:ac:6c:56:2a:37:bb:
         5e:f7:2c:cf:4a:ac:fe:9f:02:e9:af:0a:1d:11:e6:01:0d:45:
         e1:c9:27:15:0d:02:95:bd:7d:d1:35:8d:1a:02:9f:c5:f1:4f:
         48:5e:e4:7d:15:4d:8f:a4:37:2d:47:41:bd:3f:cc:e6:a9:15:
         3d:95:74:b7:32:61:10:94:27:78:ca:8c:5e:36:dd:00:65:ec:
         ac:69:40:fd:65:fe:06:48:a8:66:e4:43:11:4d:d5:ff:13:8e:
         a5:07:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org