Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3defd2a1-940b-3d6e-95df-df6d7aaa62bd.roa
File:                     3defd2a1-940b-3d6e-95df-df6d7aaa62bd.roa (raw, json)
Hash identifier:          JUoSACjuKscRriv0UBBqhIM3YJ+MqeHzXaKRjW9wY2c=
Subject key identifier:   EF:F9:62:33:D9:89:FF:E0:60:02:53:72:6C:D0:53:38:CF:3A:51:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847617193BCDE700B96D014FF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3defd2a1-940b-3d6e-95df-df6d7aaa62bd.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.26.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:93:bc:de:70:0b:96:d0:14:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=25c22173-2cab-461e-8588-c844d6f48664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:e6:20:f3:0e:13:4d:1b:ef:80:a7:b2:7b:
                    0c:24:7a:73:2c:62:5c:ef:0c:ca:2f:a9:c0:43:0d:
                    49:2d:90:58:e0:6f:52:fe:b4:62:7a:7b:e5:44:83:
                    8d:0f:6d:16:71:77:58:da:37:f8:06:fa:b2:f3:1d:
                    ec:2b:5e:35:bd:be:b8:f2:ed:2b:db:4d:9f:04:6a:
                    f4:9b:e3:02:49:c9:4a:17:25:d5:e2:f1:b2:b8:97:
                    76:0a:25:29:21:bb:c5:19:a9:f1:38:40:1d:f5:3e:
                    bd:ec:a1:d5:11:7b:1b:63:5c:a6:7d:3c:4c:ae:71:
                    66:74:64:57:37:0f:b4:bc:02:65:4d:de:31:38:3e:
                    85:08:1d:51:d3:ae:ed:d0:c2:95:88:24:e0:ed:ae:
                    6d:13:a7:c0:ab:48:75:52:fe:c9:37:47:de:e1:03:
                    10:8c:0e:06:29:8b:77:8e:36:ea:b5:5e:a3:5e:df:
                    2a:e0:c1:c9:1a:11:e4:28:60:77:14:f1:24:c2:dc:
                    89:21:57:18:4f:46:3b:4c:0b:0a:a4:df:13:7c:31:
                    52:67:f6:ea:7f:f6:ef:7a:bf:26:6f:9b:d5:69:9e:
                    ee:90:cf:f7:ae:0d:34:79:9e:31:6e:66:43:0e:59:
                    4f:77:11:8f:a8:a9:14:a9:5f:e6:94:40:a3:55:c0:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:62:33:D9:89:FF:E0:60:02:53:72:6C:D0:53:38:CF:3A:51:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3defd2a1-940b-3d6e-95df-df6d7aaa62bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:c9:af:37:11:56:be:f3:5d:2a:89:b8:92:88:a9:ec:1e:
         6f:30:25:59:c9:b0:cc:cb:86:3a:04:b2:47:7e:72:29:6b:ae:
         7e:86:6f:c4:86:68:d4:f2:0c:00:e2:89:e9:fc:da:23:59:97:
         42:8a:46:0b:68:b5:a3:2c:df:15:91:32:16:4a:95:ec:02:d8:
         0f:64:a7:7a:f0:81:e2:a1:38:35:a4:df:c5:a3:fb:65:b4:7d:
         10:27:da:1c:b9:8a:b8:f7:5a:1a:bc:51:83:3d:3c:e3:d4:e1:
         07:bf:10:60:ca:d1:0a:ec:ae:10:d2:74:1c:83:4e:ac:cd:a0:
         47:59:90:f6:d6:23:3c:5d:3a:85:34:18:82:f5:c5:24:c9:75:
         39:98:63:76:39:1a:7a:d1:9c:85:28:27:77:b2:1f:31:b4:97:
         b2:9b:57:36:69:3b:55:2e:7d:26:5c:05:1f:ea:72:12:c8:a3:
         28:a4:aa:d5:60:f6:ee:1f:9a:b5:4b:58:c5:85:41:8d:b2:a1:
         db:75:cd:dc:6e:78:0e:fe:f5:98:f3:43:62:72:94:de:e6:66:
         36:46:42:4f:89:eb:7f:45:3c:2e:e3:bf:49:55:c0:00:6f:c5:
         92:e1:28:6e:3a:bd:2e:96:9e:e4:48:e6:69:81:66:78:27:b6:
         be:c4:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:32 2024 by rpki-client on console-fra.rpki-client.org