Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4adfb76c-bf3d-3b29-a792-0adf82577f4e.roa
File:                     4adfb76c-bf3d-3b29-a792-0adf82577f4e.roa (raw, json)
Hash identifier:          mER/XoQNMrEtYFXOTYBsFPuAo5AvGT2vtKzTO4l/Yro=
Subject key identifier:   F1:18:D6:3F:30:05:E2:94:02:6D:2D:87:31:F9:AE:9C:AB:5E:AD:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF61CD6CFAF1385E084D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4adfb76c-bf3d-3b29-a792-0adf82577f4e.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     36183
IP address blocks:        172.224.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:61:cd:6c:fa:f1:38:5e:08:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=223a3a78-6f6a-4147-874c-543004c39cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:e7:32:b3:83:45:d3:cf:10:ee:2e:89:48:
                    d5:9d:4d:a2:a1:ea:93:ad:3a:1c:a4:9d:e5:4d:37:
                    20:15:6c:1a:24:5e:50:c4:7f:48:0f:7b:6b:ed:14:
                    c4:a4:8b:f1:2f:bf:df:53:7d:4a:b9:e0:b8:80:00:
                    3d:44:2e:26:39:42:f0:86:b7:27:69:c4:ac:79:95:
                    06:0b:28:a4:70:b1:f5:87:4c:4a:99:0d:83:4b:c7:
                    3c:1e:7e:37:93:4d:be:6a:2b:2a:d4:3a:0f:27:69:
                    37:dd:a9:18:dc:c2:11:74:6f:1c:90:83:d8:b1:a8:
                    c0:2c:87:e2:80:5f:26:9e:11:66:88:bf:d9:32:a9:
                    8c:4e:81:cb:2f:7c:b6:ac:2a:fb:61:3c:1f:6e:89:
                    52:f7:66:99:52:6d:66:4b:60:6b:c4:ca:f1:23:a1:
                    73:17:68:01:e1:ab:13:5a:9c:22:3a:2e:4c:c4:3c:
                    2b:24:01:33:23:a1:d1:e0:6d:3d:fb:29:f9:9b:d0:
                    1c:36:d6:3a:af:5c:1f:f9:2b:ee:60:71:a3:73:7a:
                    3f:02:67:d9:f8:42:00:b1:da:57:e6:f4:86:a3:eb:
                    59:e4:fa:74:b8:e5:ee:e1:80:08:18:4f:52:7c:fd:
                    d2:10:0d:6d:33:74:3a:da:88:9e:05:07:cf:86:15:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:D6:3F:30:05:E2:94:02:6D:2D:87:31:F9:AE:9C:AB:5E:AD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4adfb76c-bf3d-3b29-a792-0adf82577f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:97:3f:73:6c:5f:c3:b7:35:16:fd:1b:22:8b:b6:1a:d9:58:
         7d:35:00:5d:ab:c4:c4:79:02:c4:7b:1f:55:7f:a3:e3:f7:95:
         1d:e2:a5:c8:36:3f:4b:ff:54:50:d3:c9:ba:99:39:17:a0:29:
         e5:9b:39:83:0b:9e:b4:c5:f1:3c:31:d2:81:64:93:67:c6:28:
         95:65:db:49:8a:03:be:ac:12:85:86:28:0d:c4:81:63:9a:c5:
         37:bb:2e:51:aa:01:27:1a:dc:55:7b:47:dd:39:9b:8e:89:82:
         fb:09:dc:86:4a:3c:16:74:d2:81:4a:67:42:3b:1f:49:82:9c:
         98:01:40:c6:6c:ec:52:7e:9c:1b:84:f1:ec:c7:88:df:cd:5e:
         0d:ce:2f:c8:73:21:0a:0e:97:a5:0b:06:2a:2d:ac:8a:3c:03:
         d9:f3:f5:54:f2:7c:df:1a:b0:c0:f1:0c:4a:74:cd:42:b9:5b:
         91:6f:b3:45:4f:de:4e:7a:bf:ac:16:82:81:69:38:99:4c:9a:
         5c:0b:a8:dd:28:a7:f5:a9:12:eb:5d:01:ae:0b:27:76:fa:7b:
         48:87:30:29:36:ed:1c:0a:e7:ce:6f:20:76:35:8d:b9:4a:3f:
         86:1c:9f:2d:39:67:41:b6:23:34:69:1e:49:fa:d7:04:a2:09:
         30:35:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:52 2024 by rpki-client on console-fra.rpki-client.org