Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
File:                     5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json)
Hash identifier:          U4NastoAz8/Gr4OILR5xrUAzrRlRIox/aVOUnVDfmno=
Subject key identifier:   00:2A:ED:47:44:C7:2B:B6:A1:6D:64:B4:0E:28:96:1B:C7:C1:64:43
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F432858473095F35508FB2F590FDB8700
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     397865
IP address blocks:        216.168.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f3:55:08:fb:2f:59:0f:db:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=2e885ccf-22d3-4fcf-a6b5-99c5a17447c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:6d:e0:33:07:11:9b:27:a4:38:81:32:27:
                    6f:5c:8f:6e:80:2c:4a:28:ce:55:bb:ec:7e:7a:55:
                    5c:8d:6a:b9:82:76:62:8b:48:4b:c1:39:3e:17:55:
                    96:ca:72:68:e1:c1:b7:c8:56:bc:d0:f2:1e:c3:1b:
                    f7:d0:99:4b:aa:29:15:da:16:e6:35:1d:03:e2:fa:
                    e3:d0:75:24:a6:7a:e3:33:0b:e1:50:8f:ed:05:24:
                    d1:8c:f5:5a:c3:3c:79:66:d2:f2:9a:a1:4c:ef:f8:
                    92:2b:24:b7:50:dd:c5:e3:45:06:1b:02:40:06:19:
                    1e:74:85:a4:ec:86:a9:d4:dc:24:be:b1:0f:33:bc:
                    2f:91:9c:84:ec:cc:6d:da:24:bc:ed:94:79:5a:68:
                    77:f0:91:9a:3d:c5:89:56:f8:3e:95:95:b7:15:ac:
                    f8:d7:c3:d3:c1:5c:aa:89:f2:5c:a6:2d:16:09:2d:
                    16:81:8b:dd:07:79:e8:c2:39:cc:ee:2e:45:8b:e5:
                    ed:c8:cb:5a:27:05:47:37:ae:22:6c:45:6d:92:23:
                    1b:6c:35:f7:4a:af:6e:b2:f4:8a:d1:27:f0:fa:f9:
                    23:88:9b:43:ae:67:8c:9d:e1:fa:bc:f4:3c:77:4a:
                    b7:65:56:ce:7d:65:91:2f:01:6d:72:7c:82:e4:e5:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:ED:47:44:C7:2B:B6:A1:6D:64:B4:0E:28:96:1B:C7:C1:64:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:a4:d9:98:3b:66:1f:ef:85:4c:32:ee:d2:72:dd:78:5e:
         f9:66:6c:4f:3b:48:97:ac:f0:6b:bc:86:e6:2a:88:7e:d9:95:
         6a:e4:4b:49:0f:88:bb:01:67:7b:01:34:cb:35:cd:dc:2b:75:
         58:db:40:ab:b3:18:5f:64:da:57:1d:ed:d0:e8:25:56:a8:0d:
         82:6c:14:c1:b9:11:cb:e3:80:3d:41:6b:83:99:39:90:b4:ed:
         18:a1:a5:a1:2b:4a:9f:3b:3a:33:9f:db:77:d5:5d:30:3e:6f:
         11:fb:91:1f:55:07:b1:c5:3d:f6:f8:72:02:d6:c3:22:ce:51:
         5a:c2:9a:e4:63:bc:66:ee:e9:07:3f:cd:82:28:d6:5e:b3:86:
         76:d1:01:a7:55:ae:a6:a1:e7:fd:84:3b:d7:6b:1b:2f:b0:73:
         26:9d:49:45:22:14:86:ec:e4:1d:7b:2f:74:e0:6a:91:1b:de:
         4f:28:93:8a:6e:4b:3b:d5:f5:d1:f9:75:12:f8:67:25:8a:69:
         fe:d7:f0:ee:0b:61:2b:40:e1:26:ab:77:d7:5e:82:63:e6:a0:
         a8:8d:a2:39:54:05:15:86:07:d5:8c:4b:1b:2a:52:42:a0:e4:
         91:67:76:1e:90:d9:68:2e:c2:19:4d:e7:7e:d6:bb:c5:88:f6:
         0d:cb:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:58 2024 by rpki-client on console-fra.rpki-client.org