Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd2e97a-49e3-3ed5-84e7-02b30f107ee4.roa
File:                     2fd2e97a-49e3-3ed5-84e7-02b30f107ee4.roa (raw, json)
Hash identifier:          BhRUqR1BjukDsacm5BA0barJVchl313KUCA7stnfEZg=
Subject key identifier:   B3:82:65:49:48:2C:8A:C1:84:80:07:77:62:2B:21:F3:9B:4D:78:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847362B683F2F01B4BDFBB9BB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd2e97a-49e3-3ed5-84e7-02b30f107ee4.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.224.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:68:3f:2f:01:b4:bd:fb:b9:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=9eb91497-0004-4e49-ae41-110809a8358b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:d2:e9:66:6d:4b:fd:ef:21:2c:cf:fa:4d:
                    be:b9:d7:49:26:4d:78:b6:6e:f2:ec:68:95:7b:81:
                    08:59:3b:f4:1e:4b:65:f2:58:bd:aa:d8:fc:4b:77:
                    f3:11:9b:cb:d8:0f:66:9a:d8:7d:6e:23:2f:1d:81:
                    3d:51:aa:85:32:50:a9:1b:c1:98:73:7d:98:ac:9f:
                    61:3c:bb:f5:4a:fb:91:0c:1a:47:fd:0f:32:5f:87:
                    3a:4d:28:b5:7b:63:0f:4f:7d:2d:a4:18:4d:8c:26:
                    f4:fd:07:c3:bf:32:4b:4e:7e:06:b7:d2:c7:28:0b:
                    2f:31:48:cb:84:dc:eb:37:37:f5:35:76:bf:01:e2:
                    dd:b6:91:cb:26:4b:14:db:51:9f:1f:ac:00:13:76:
                    ba:4d:ed:6f:fe:b1:2b:22:59:2d:a3:75:47:61:b5:
                    fd:57:04:ce:8d:1b:75:0b:c7:d3:40:e4:c4:2b:8a:
                    1f:c4:2d:a1:4d:23:13:ec:56:b5:62:6c:b7:9f:55:
                    9e:99:a4:cb:6d:9f:b4:41:29:50:ed:13:ed:9e:86:
                    e8:4b:eb:e8:20:a7:9e:bb:63:b8:87:af:00:c1:76:
                    74:62:98:84:38:45:d0:80:7b:93:41:c8:21:75:4b:
                    93:28:cb:3e:d6:09:d8:9c:a2:b9:53:e8:d4:fe:19:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:82:65:49:48:2C:8A:C1:84:80:07:77:62:2B:21:F3:9B:4D:78:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd2e97a-49e3-3ed5-84e7-02b30f107ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:81:f4:b7:d5:30:5c:87:74:ed:5a:62:6f:be:61:ac:bd:b5:
         b4:17:47:1f:67:c0:a4:96:00:89:ed:4a:d6:d0:78:60:50:0c:
         7c:2a:f7:36:34:ea:10:ab:fe:a6:22:cd:65:00:9c:e1:10:cd:
         25:20:21:89:d2:0c:8d:64:f0:f6:27:e0:fa:31:03:f6:3f:e8:
         3e:09:69:ab:00:49:75:db:89:78:20:90:5c:06:5c:4c:13:22:
         70:4d:56:78:89:ee:e2:91:b7:45:d4:5a:a9:3a:46:69:1d:77:
         c3:c1:24:07:15:9d:48:01:5c:be:88:19:1a:22:a9:e4:77:19:
         91:da:cf:4d:6b:65:5b:12:b6:4a:1d:3f:08:a6:0c:44:ac:92:
         d5:7e:db:8e:07:80:a3:1a:75:14:b6:89:44:f1:07:41:6e:ae:
         84:76:36:80:93:ee:05:4e:71:4e:22:4d:54:88:1e:88:50:9f:
         ca:5d:c6:1d:32:32:42:cd:36:b2:74:c8:26:31:f7:d1:fb:fa:
         65:47:21:52:15:2e:8b:38:c7:da:95:05:d0:0b:69:ef:36:f3:
         f2:25:fe:cd:25:bb:57:4b:82:e2:f5:ce:0a:2d:11:c1:a9:c3:
         c4:c7:7c:1f:44:7f:99:dc:2f:7e:05:26:8a:61:13:63:49:7b:
         d8:73:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:23:55 2024 by rpki-client on console-ams.rpki-client.org