Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1e233836-54d5-3ac0-88b8-8fb22bd04d03.roa
File:                     1e233836-54d5-3ac0-88b8-8fb22bd04d03.roa (raw, json)
Hash identifier:          xJ4rS3FpuNKZtDguN2BV9Ai8QEdtmWkQf9dcGSGG614=
Subject key identifier:   5B:C9:56:1D:D7:7E:29:37:55:06:C5:65:8F:6C:9D:DA:4E:C4:62:B7
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F43285847A5D6AE5A3D1127BBF0E8DF80
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1e233836-54d5-3ac0-88b8-8fb22bd04d03.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     32425
IP address blocks:        204.122.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ae:5a:3d:11:27:bb:f0:e8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=e7e7e12e-7c1e-4b93-be46-ccb23481e97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:82:05:3d:f8:d7:d7:b0:5a:24:78:8c:15:
                    a9:6e:f6:76:2f:f8:06:35:f4:1f:15:6e:9c:39:75:
                    77:b9:d2:2d:49:aa:aa:38:89:52:05:0b:2c:36:ae:
                    14:96:3d:65:fd:95:b3:78:1b:13:8c:30:98:8f:88:
                    34:d9:4c:ac:20:dd:82:9d:aa:6d:4c:2f:eb:b2:8e:
                    91:9c:6c:4b:c5:52:d5:cf:13:d3:da:05:3c:fd:ef:
                    ee:5b:46:5e:f7:01:63:21:c7:c4:e4:77:00:d0:3f:
                    01:d3:20:8e:26:5a:95:bc:e2:64:6d:5e:c2:ad:e9:
                    28:62:02:cf:e2:30:31:88:55:dd:f4:ae:20:8f:98:
                    84:ed:94:41:f5:24:51:22:81:27:81:a1:f2:5c:18:
                    31:5f:ae:ad:82:42:9d:98:65:6f:0d:4a:80:c0:68:
                    db:93:29:1a:f9:bb:e1:d3:0e:20:9a:bd:77:72:dd:
                    9f:67:5f:93:ee:7e:86:30:2c:14:b5:c6:ef:22:20:
                    63:53:8b:ec:f8:a1:92:c3:7e:da:65:57:c6:6e:01:
                    c9:85:d9:cd:fc:cc:34:cb:03:8e:35:2c:ce:fa:b9:
                    e0:5b:7a:94:15:c5:66:74:f1:2f:2d:73:9f:16:79:
                    ea:df:48:61:db:f8:57:b8:9d:69:0d:08:d3:a9:d6:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:56:1D:D7:7E:29:37:55:06:C5:65:8F:6C:9D:DA:4E:C4:62:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1e233836-54d5-3ac0-88b8-8fb22bd04d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:20:bf:19:bf:a6:8f:b0:e0:a7:26:e3:b9:08:58:0c:10:
         79:f9:34:ae:c1:5a:b8:af:63:9d:a1:4b:bf:26:76:a4:c1:5f:
         1f:d2:61:ad:55:e5:56:10:70:3d:4e:10:bf:73:7e:e2:cd:a4:
         87:75:e5:48:ce:15:c1:d8:11:53:d3:c5:6c:48:e2:3b:38:ae:
         7a:fc:2f:ab:cb:0c:b6:dd:1e:6b:d1:d1:d3:e9:ce:86:e7:07:
         dd:a2:0a:0d:1b:94:ba:e2:61:e8:e7:73:69:91:4d:2e:15:d7:
         73:31:6c:e1:6d:ed:36:ab:64:8a:8a:0e:50:c8:e0:1f:26:f8:
         9a:44:5b:fe:8a:7e:0c:cc:1a:83:16:73:f3:9c:fe:f3:0a:2a:
         b0:cd:4e:02:a9:ce:e3:53:f8:16:a7:fe:8f:b3:a2:fd:99:6a:
         5a:e9:1e:3e:81:d5:18:b6:8e:82:6e:ba:2b:dc:e9:8a:db:c0:
         10:0f:c3:2e:6d:3e:36:89:ae:cc:0e:98:6a:c0:5e:7c:8b:7f:
         e6:ad:10:4c:90:9b:05:11:30:4f:bc:33:c3:a4:91:30:f1:1a:
         85:e4:c2:95:9b:95:75:73:90:34:1d:ef:c6:2b:23:a9:a9:5f:
         b3:fc:80:c1:ea:1f:d6:92:f7:cd:06:88:58:14:ee:d4:3d:e9:
         07:b0:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:10:09 2024 by rpki-client on console-ams.rpki-client.org