Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62feaee9-d751-3e5d-9a3f-9ea11041189b.roa
File:                     62feaee9-d751-3e5d-9a3f-9ea11041189b.roa (raw, json)
Hash identifier:          fEKFFfSynaHNjOca+OYCjKXoB9yDgZ6oz3c+KPXUL0Y=
Subject key identifier:   90:C3:53:E3:EC:F5:25:02:70:2E:AA:2E:C7:8C:F6:5F:7B:D7:18:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475910D2043C62CAD4EDC6F2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62feaee9-d751-3e5d-9a3f-9ea11041189b.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.29.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:d2:04:3c:62:ca:d4:ed:c6:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=d70670dd-2392-410f-9828-be0f2eebf900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:e0:8f:5b:17:e3:08:80:97:d6:bf:b6:38:
                    0f:e5:de:17:bf:23:a7:04:60:bc:c0:b0:66:51:6f:
                    6e:0a:ac:fa:7e:7a:7d:3c:cf:d9:da:85:a4:9c:43:
                    ba:c7:a3:4c:4f:99:5d:59:74:1a:00:f4:c7:aa:54:
                    e4:9a:37:19:49:52:05:bb:d6:25:c1:0e:45:cb:8f:
                    02:3f:b6:c2:f0:8e:d5:d0:4d:e9:20:e0:96:62:93:
                    2f:8a:8a:c3:c0:f5:49:36:8f:63:d4:2b:e0:ca:f6:
                    53:ed:d9:7f:ca:fc:9a:5a:2a:7a:5a:12:c0:5b:86:
                    f5:10:91:c5:de:b1:bb:20:0d:bb:2b:4d:88:33:37:
                    0e:f8:0e:e0:e0:53:e4:89:7a:db:b3:7b:e7:1b:db:
                    5d:c8:b5:25:f9:45:18:4c:da:7b:2d:51:8b:02:c5:
                    d1:04:87:f7:11:d9:ab:6e:9e:87:12:4d:0d:56:b1:
                    bb:d8:0b:e4:c9:81:02:39:ef:09:69:67:ed:26:5f:
                    86:43:50:94:34:31:41:5d:62:47:3d:94:1b:cb:25:
                    11:14:cc:10:21:e5:b9:2c:de:95:54:bb:27:c8:02:
                    81:d4:f1:e4:b0:42:0f:ba:e0:52:45:d0:b2:69:5e:
                    be:19:31:09:df:0d:a1:1e:56:74:a3:01:82:2e:ee:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C3:53:E3:EC:F5:25:02:70:2E:AA:2E:C7:8C:F6:5F:7B:D7:18:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62feaee9-d751-3e5d-9a3f-9ea11041189b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:b1:2e:12:93:6f:c4:5c:3d:5f:1f:dc:84:06:e8:93:6d:
         19:7e:7f:11:c8:bf:00:d7:45:97:9e:3e:2e:cd:39:3d:31:37:
         b5:f6:cf:64:e9:e4:9f:b8:99:2a:1f:97:18:9a:3d:ee:26:60:
         94:cd:5a:18:6c:4a:c0:e5:7b:92:12:bc:08:25:87:78:15:9c:
         d0:9f:83:a5:be:6c:cf:e2:21:bc:d8:36:33:e2:aa:96:b5:1c:
         12:09:95:a3:7e:7a:07:2f:e1:8c:64:e2:96:fa:1b:c9:8b:3e:
         8b:db:ab:d4:13:36:9a:08:c0:88:8a:8c:c1:5c:57:ea:0d:a8:
         19:7d:a4:74:12:e5:19:a2:bf:2e:14:2d:91:85:c2:ab:db:54:
         13:60:7b:6f:62:7f:70:50:3f:f7:79:cc:69:2a:6e:c6:15:16:
         3f:6e:68:93:8d:35:6f:6c:f3:74:62:3d:24:29:33:97:46:bf:
         3c:40:3a:e9:27:92:6c:50:af:d6:75:c3:03:bd:c3:e5:9f:20:
         b3:de:70:a8:28:bc:6e:0f:c3:50:d8:5d:68:39:86:31:a5:6f:
         d3:82:a1:c2:2e:a1:27:ec:77:77:7d:d9:db:97:00:c2:11:0d:
         71:db:83:83:a5:56:5b:e4:3a:ef:3f:ab:c6:83:0e:6e:db:b2:
         77:c7:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:49 2024 by rpki-client on console-fra.rpki-client.org