Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b5bb1ab-c6fa-3353-a1a3-c39aa5c97d89.roa
File:                     1b5bb1ab-c6fa-3353-a1a3-c39aa5c97d89.roa (raw, json)
Hash identifier:          mxv7aHNagpokIANBv3g45+4Glwvn576My2CnAv3j8zo=
Subject key identifier:   66:85:64:56:A8:24:BD:06:BE:08:E4:AD:E3:8B:48:C3:9D:6F:71:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584734C8904E6F5C592E98506780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b5bb1ab-c6fa-3353-a1a3-c39aa5c97d89.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     36183
IP address blocks:        172.224.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:90:4e:6f:5c:59:2e:98:50:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=31c110a0-c054-42f8-a250-0b93f8812563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:bf:c3:af:31:85:2c:6a:7c:0b:3f:8b:a2:
                    d8:3d:cb:95:f5:0e:c2:8b:b9:8c:f5:82:2f:8f:9c:
                    3c:07:f8:7c:6f:e1:4d:ff:22:77:71:66:94:ed:16:
                    24:2f:8f:23:08:c2:60:12:11:8c:ab:8b:54:58:98:
                    f7:10:13:1d:d7:33:f7:c9:30:7d:62:1d:d1:d1:e8:
                    b3:df:49:40:cc:6e:26:98:fc:8d:89:d7:56:70:89:
                    6d:96:17:d3:8c:5a:d7:95:49:3d:82:fa:da:f1:0a:
                    59:53:ff:ed:5a:f0:8f:da:31:e2:f0:08:8a:1d:65:
                    0a:f1:33:46:59:18:ce:02:7b:2c:d3:36:23:7b:eb:
                    49:90:8b:ba:58:c3:f6:47:bc:fc:d9:ce:d1:8f:a9:
                    77:70:10:59:cf:69:18:71:88:08:b1:e2:03:df:8c:
                    e7:9f:58:a0:b8:85:85:27:ee:95:8b:22:5d:da:3e:
                    32:b5:9d:9c:e9:d5:71:11:07:4d:62:fd:2f:56:0f:
                    7c:18:e4:9a:42:2d:1b:2f:f7:3a:83:ca:d5:f0:1b:
                    95:6e:60:9c:0a:dc:af:e7:e7:86:3d:da:32:9c:c9:
                    b2:2f:92:51:d8:19:a8:a5:19:77:14:76:56:8c:d8:
                    6f:c3:ad:aa:3b:0d:84:32:79:23:6a:44:6a:f3:56:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:64:56:A8:24:BD:06:BE:08:E4:AD:E3:8B:48:C3:9D:6F:71:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b5bb1ab-c6fa-3353-a1a3-c39aa5c97d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:ef:dd:dc:17:5a:4e:b1:6d:6c:94:05:a4:b0:3c:3b:7b:
         84:cb:a2:55:4c:a1:2b:ac:95:16:fc:3c:4f:87:ab:70:c5:23:
         ae:13:15:56:45:44:0b:c2:a3:d7:89:0c:e4:18:f3:f6:aa:69:
         c9:2f:c3:33:03:2c:89:0b:5b:fc:96:41:71:05:3e:6f:b1:13:
         e3:76:31:67:35:15:9c:ef:23:e5:7d:6b:23:34:27:66:18:0e:
         75:66:6d:87:dd:d7:63:47:d0:3c:38:c0:eb:61:65:06:28:c9:
         ed:93:a3:09:5f:67:97:21:8b:44:b1:4b:bd:a4:dc:3c:f0:b3:
         e6:74:e0:97:3d:0a:6d:69:c1:cd:b0:c0:57:e6:5e:e6:64:1e:
         f9:c5:be:64:af:e9:ad:6e:20:d3:7e:15:ea:bf:af:19:e5:5a:
         84:76:56:51:ff:3f:9b:26:ad:f7:6e:d7:bd:82:19:f3:55:07:
         8d:6d:95:ec:10:cf:73:ba:b5:35:c8:26:d4:50:6b:ec:17:60:
         6d:d8:a2:37:70:ef:6e:60:19:34:16:7f:da:bd:9c:25:2c:3d:
         e6:fa:73:a3:b6:14:e4:01:02:6e:08:9f:c7:4f:c7:17:bd:6a:
         a0:ba:50:37:b1:63:54:cd:e9:75:ea:4c:2f:9e:e0:56:cc:d1:
         cb:d3:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:34 2024 by rpki-client on console-fra.rpki-client.org