Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa
File:                     c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa (raw, json)
Hash identifier:          V9ChuH0KTz5R+S+AFrffcIrJydL/K3+U2VXWAsXoLMg=
Subject key identifier:   72:F0:54:7E:77:8F:96:AF:73:2E:5D:D4:6C:59:F7:F6:FC:F4:A6:0C
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F432858473A5B8C5986E33B6E5E087520
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16548
IP address blocks:        204.186.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8c:59:86:e3:3b:6e:5e:08:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=327d458f-92ab-4408-9e51-befe49c77c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e7:e5:62:68:5d:7f:6e:7d:45:e3:d3:3c:0f:
                    5f:0d:e3:e1:e9:92:08:48:c9:fe:5b:a3:e4:a6:be:
                    da:73:55:2f:cd:f7:36:a3:5d:3b:26:0d:f8:71:e8:
                    43:51:a5:c8:90:da:1a:7c:b9:d8:b2:21:e2:eb:69:
                    c2:cc:95:3d:5b:4d:07:de:2e:92:6a:79:93:28:f0:
                    68:45:b6:75:84:e9:f9:7b:9a:2d:08:11:77:30:4b:
                    fd:09:da:17:0c:98:2b:74:ad:57:74:40:80:dd:f3:
                    66:68:1b:7e:8d:f1:59:5e:37:9a:42:49:1b:a0:d7:
                    de:53:35:5f:ba:23:b6:1b:41:97:f2:61:db:92:3d:
                    54:2f:7e:91:7c:b2:da:ae:0b:aa:5e:fc:0b:be:3a:
                    dc:60:54:7e:b6:05:f2:34:74:9e:a7:9e:55:75:c9:
                    a6:4b:4d:e8:ca:81:45:46:d5:10:74:d5:83:25:51:
                    4a:22:1d:2b:de:ab:6d:a5:39:91:28:e9:16:19:e8:
                    d0:43:7a:62:a1:97:93:de:d6:ce:c2:d1:8c:34:a5:
                    24:b3:b0:44:b1:09:35:b5:69:19:c9:d3:c7:2a:8f:
                    49:10:19:18:4d:20:e8:3e:29:8f:86:f3:27:93:66:
                    c8:37:dd:c1:2d:82:c5:5a:65:70:c7:e7:2e:d8:33:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:54:7E:77:8F:96:AF:73:2E:5D:D4:6C:59:F7:F6:FC:F4:A6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.186.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:04:8f:fb:6b:29:4a:da:aa:85:3d:ae:b9:36:84:4d:c3:7d:
         7a:c5:53:d8:08:51:18:21:60:b1:72:b9:85:e4:cc:d0:9d:ed:
         97:3e:0e:40:5b:ba:c5:fc:66:9b:68:03:34:12:3d:a3:b8:7e:
         97:11:6e:d6:05:16:d0:93:7e:18:a0:ca:25:0c:4d:3d:ce:c1:
         0d:71:f6:0f:6f:2d:7a:77:97:53:a1:65:06:77:c4:5e:33:90:
         d9:3e:32:83:e0:69:d6:35:41:e8:bd:e8:90:e1:11:3c:de:bd:
         56:26:1c:b8:e3:49:2a:d1:f4:7c:99:c9:f8:a9:3e:f3:8a:70:
         fe:d3:a8:a0:f0:4e:8f:f5:01:5e:db:05:95:23:2c:46:53:dd:
         ce:de:20:da:49:18:3f:ee:6d:e3:95:c4:4b:5e:83:b2:59:ef:
         7b:05:3f:9f:a4:94:7a:ef:62:37:b3:11:2c:75:e6:b5:76:78:
         47:e6:96:1b:cc:73:b6:53:e7:61:7a:e1:71:4d:f6:fc:24:cf:
         58:2e:78:94:6b:58:b1:59:79:f9:3b:a9:12:b7:23:05:d1:ac:
         12:5c:c0:fb:95:b0:0d:76:33:fa:2b:84:f7:dc:11:83:12:fb:
         fb:d1:ee:c2:32:ce:8c:8b:67:8a:33:65:7f:80:a9:2f:3b:35:
         3c:c7:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:47 2024 by rpki-client on console-fra.rpki-client.org