Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa
File:                     52a49189-805c-325e-8598-e9f6daa0967b.roa (raw, json)
Hash identifier:          VHieigsX+Kak+wlx/nxX78NMEPuS5qi5j7HEgsA8fX4=
Subject key identifier:   1F:13:FA:EB:F4:9E:46:92:E8:28:FB:43:80:F2:0C:9D:19:E3:3B:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858471E7084A241194464EDF6D230
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.225.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:84:a2:41:19:44:64:ed:f6:d2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=b2816631-e15f-4b97-b23f-adc0ecaadd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:bc:63:82:75:dc:71:db:91:36:43:f8:5c:
                    7c:c1:c8:dc:4c:61:50:c2:ba:03:6f:c8:d4:ca:14:
                    9d:31:58:37:5b:ac:ee:2e:6e:7a:eb:0d:54:6c:b7:
                    5b:52:b2:c0:04:a2:1c:c5:1f:ee:a2:c2:19:f6:db:
                    e5:74:f3:15:fc:c6:22:78:ff:5d:2a:97:b3:30:fe:
                    ba:04:d3:ec:ba:35:86:7d:52:a0:3a:61:bb:5e:ae:
                    3d:16:ae:a0:71:03:d7:c5:a8:1c:06:d3:b7:8b:97:
                    f8:3f:aa:d4:0a:48:66:61:85:b6:ab:5d:a6:40:0b:
                    67:10:e4:d5:e6:c7:f3:95:ad:d2:7d:98:4d:fc:df:
                    d3:16:4e:17:a7:05:a6:61:70:06:d0:31:e3:9e:43:
                    1b:79:bb:8c:4e:64:6a:01:d8:ee:a2:68:ad:83:00:
                    1e:ae:39:0f:a3:95:50:1a:88:8c:21:59:51:1c:ab:
                    ca:28:de:a4:c0:d2:87:3f:c4:34:08:15:2d:3f:2d:
                    a1:ff:10:0f:b5:52:12:cd:c4:8f:ef:e7:91:54:f8:
                    d0:b9:c4:f2:cd:2a:c3:ea:99:3c:0e:3f:3a:f1:51:
                    6c:0b:ed:57:c9:60:63:aa:83:7e:c3:21:00:c4:60:
                    16:34:7a:59:be:01:7b:f2:78:46:29:38:86:e2:75:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:FA:EB:F4:9E:46:92:E8:28:FB:43:80:F2:0C:9D:19:E3:3B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:95:26:2e:80:f9:6f:1c:76:d4:5f:72:64:ca:03:9d:ee:04:
         60:dc:ae:6e:3c:6a:43:e4:00:77:70:f1:9e:5b:4e:31:3a:b4:
         fa:9b:4f:bc:dd:92:de:74:ad:be:12:ee:3f:03:bd:df:8d:87:
         60:04:0f:48:9a:7b:8f:98:cd:2e:ee:3c:ea:db:4c:7d:1e:f9:
         72:b6:fe:88:bf:62:87:32:ee:df:b8:21:b1:32:5c:08:85:67:
         98:4b:0f:75:09:8e:45:10:c2:50:27:25:27:8f:2d:f1:a1:d3:
         93:a0:5b:76:cc:8e:91:4c:4c:fe:63:61:05:f0:e8:10:43:e6:
         e7:82:a7:db:c5:fc:5b:54:18:4a:02:26:66:6c:2e:b1:42:f1:
         19:b7:fd:35:95:c9:ab:ad:64:4e:08:ff:3f:6c:fb:06:e9:0e:
         a7:88:d7:0d:73:db:4f:7d:18:a9:f0:fb:03:95:af:89:40:5c:
         05:18:cd:10:ac:f9:74:d0:30:bb:96:9f:df:e2:7d:48:16:68:
         c3:b9:e8:3a:ce:bf:bf:a3:49:11:fd:77:70:db:fa:26:f8:f4:
         4d:8b:0b:0a:43:16:95:4a:8f:bf:7b:5d:00:36:ed:ad:ca:39:
         44:89:2e:6e:fb:dd:5a:4b:54:21:92:45:10:44:0d:64:7b:6c:
         0b:c4:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-ams.rpki-client.org