Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa
File:                     c9278a07-6723-35ed-b9c3-1d86bda75b28.roa (raw, json)
Hash identifier:          JESqZ9Tq+JgMaJCfRJxPiluBugCQ5Omige/jkaNG3mg=
Subject key identifier:   BF:FE:98:E5:32:53:B8:1A:35:43:F2:A8:05:9B:4C:69:03:2F:9A:0A
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285847600B860895C547F6223492C0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     11127
IP address blocks:        207.241.179.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:86:08:95:c5:47:f6:22:34:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=cca0e170-a636-4ead-9c86-dc9d3508b631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:b4:9a:f0:bb:23:ee:b1:c4:ba:5c:dc:15:
                    fe:6f:88:46:95:23:26:f4:f3:3f:72:55:b1:87:a4:
                    e7:d4:fe:b5:3d:22:13:b3:07:7c:a1:56:07:69:cc:
                    ec:df:55:71:03:df:2f:c2:03:0a:c0:10:f5:42:6b:
                    61:d0:4b:be:b2:c0:f6:6a:cb:fc:5a:4c:b0:71:ad:
                    c5:9b:34:34:2a:56:28:96:66:44:8a:2f:90:73:04:
                    74:1e:81:d1:aa:b9:62:df:43:57:5d:fb:91:86:39:
                    6b:ab:07:6c:22:4a:32:0e:e6:dd:7d:cb:04:b8:83:
                    73:e4:c0:15:5e:1f:88:90:da:89:9a:30:1e:6f:a8:
                    29:0b:39:ee:4f:2d:bd:bc:cf:04:f6:84:aa:ad:f5:
                    ec:a0:4c:02:58:30:ff:e5:6c:32:e5:e5:e7:30:5b:
                    93:59:ec:e4:47:55:18:d6:da:ee:20:2a:36:f4:69:
                    0e:5f:b9:15:0e:e5:70:a4:8b:17:66:ae:71:4a:f4:
                    84:05:9d:39:c4:1e:f2:ff:89:80:d4:bf:57:c3:a5:
                    33:6f:14:5c:3f:84:9f:5e:32:01:84:e7:e4:ca:05:
                    3c:c0:cd:bd:a5:53:d5:90:b0:00:ec:38:b5:2f:de:
                    54:16:e4:f8:9f:b4:fb:83:82:13:8a:02:08:fd:12:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:98:E5:32:53:B8:1A:35:43:F2:A8:05:9B:4C:69:03:2F:9A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:46:2a:94:6e:b6:b5:8a:75:b2:9c:fa:2e:13:3e:35:1b:ec:
         8d:1a:9e:e4:61:7f:85:d5:1f:a6:de:90:7d:2c:82:da:5a:5a:
         34:2d:56:c6:18:09:76:38:77:03:98:be:51:98:a0:6f:eb:6f:
         42:d3:8f:c0:56:d0:a5:c4:79:6b:d6:2f:d1:36:fc:7c:8a:5a:
         d0:f7:27:2a:32:7c:4b:d1:6b:ec:69:9a:cb:c3:f1:d1:4e:e8:
         2f:25:74:e8:c0:ff:58:4b:e7:c2:c7:ae:6b:9a:7c:72:6b:10:
         27:7e:d5:df:54:b1:3e:30:7c:7a:ba:88:18:4d:5d:33:1c:87:
         e6:0c:fc:ff:17:60:03:03:37:79:c9:2f:2d:d2:99:e3:2b:59:
         d1:c9:1c:d5:a8:5a:33:00:01:79:41:ce:93:68:00:15:50:be:
         ec:bf:13:78:b5:c4:69:dd:23:d8:fe:eb:ef:70:cf:6f:25:af:
         fd:ef:3c:da:5d:17:b6:19:5c:53:07:f8:90:58:71:a9:80:5c:
         a4:bd:83:63:dc:83:a8:35:93:6e:e5:d1:12:46:c6:2c:9c:74:
         b3:44:33:81:9f:17:87:76:d7:ce:65:b4:5b:7d:44:3f:da:44:
         e1:81:ab:67:37:d7:16:bc:9d:bd:82:18:0a:3d:db:ef:00:fa:
         bf:db:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org