Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa
File:                     6e19da11-8790-34a5-a9ff-044bd8573d23.roa (raw, json)
Hash identifier:          xHeMic5iS8tfhCHRt3KdNpePerlse7bKYW4tOfm1lqY=
Subject key identifier:   A8:26:9B:99:66:A2:F0:20:CA:C0:76:E2:F1:6C:A7:AC:18:D3:7A:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472C65D0CE004B78457CC5A780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     32787
IP address blocks:        72.52.2.0/24 maxlen: 24
                          72.52.16.0/24 maxlen: 24
                          72.52.17.0/24 maxlen: 24
                          72.52.18.0/24 maxlen: 24
                          72.52.19.0/24 maxlen: 24
                          72.52.32.0/24 maxlen: 24
                          72.52.33.0/24 maxlen: 24
                          72.52.34.0/24 maxlen: 24
                          72.52.35.0/24 maxlen: 24
                          209.200.136.0/24 maxlen: 24
                          209.200.137.0/24 maxlen: 24
                          209.200.138.0/24 maxlen: 24
                          209.200.139.0/24 maxlen: 24
                          209.200.140.0/24 maxlen: 24
                          209.200.142.0/24 maxlen: 24
                          209.200.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d0:ce:00:4b:78:45:7c:c5:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=97d8dd0e-1b95-40e4-806a-b3c6ed8cf552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:6a:42:15:3d:cb:90:a0:0a:a4:bd:8f:9a:
                    05:19:15:c6:ca:5b:71:93:5f:e6:42:be:0b:55:ad:
                    7e:fc:9a:f8:95:a1:7a:e2:94:ed:6b:54:b3:c5:7c:
                    25:8f:19:1a:b1:b8:c9:d1:21:1a:06:38:00:f1:94:
                    75:76:c4:43:41:b0:f1:5a:21:a1:42:58:f9:89:fb:
                    9b:6b:55:7e:06:02:eb:e0:12:9f:3d:42:8f:a2:5c:
                    75:5d:29:01:39:37:87:86:ff:8a:10:d7:4d:2b:b8:
                    10:97:fe:a5:fc:fe:76:f6:49:76:a0:da:38:53:b8:
                    e2:56:32:30:7e:24:bf:ad:9e:3e:85:11:6b:58:ae:
                    81:b9:af:f7:40:e5:3d:54:ff:36:ee:34:f7:4c:2e:
                    5d:e7:8d:88:eb:cc:ae:69:cf:e6:7c:a7:14:a2:61:
                    5b:68:f0:c0:9a:09:22:81:6c:59:b9:10:8f:82:76:
                    1b:78:df:d2:0c:3e:bf:1c:1c:b0:45:c0:41:9b:0b:
                    60:f2:ed:4b:82:59:40:ef:3b:cb:fb:3d:c8:73:dc:
                    a0:71:fd:62:14:98:f2:f7:d3:f0:bb:3c:3e:71:38:
                    b3:6e:00:2b:db:d8:f7:33:66:8b:86:d5:1f:36:ca:
                    36:f6:e5:92:8d:fc:4f:e7:21:59:64:26:7a:a9:6c:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:9B:99:66:A2:F0:20:CA:C0:76:E2:F1:6C:A7:AC:18:D3:7A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.2.0/24
                  72.52.16.0/22
                  72.52.32.0/22
                  209.200.136.0-209.200.140.255
                  209.200.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:62:64:6b:53:b9:85:2c:2f:e5:ad:6f:da:ae:32:3a:3a:
         33:aa:98:b8:44:af:5c:ba:c5:67:d6:fa:67:93:2f:34:3f:c2:
         6e:3e:2b:d6:84:8f:86:ac:b1:6c:40:dd:3c:f6:e8:fc:31:8f:
         44:b1:0e:5b:4f:7a:3a:e0:da:a5:d5:0c:85:68:6a:cf:93:82:
         3b:ce:6f:52:3a:78:a2:d1:b3:d6:5f:e6:f9:29:6c:7f:41:9b:
         0e:1a:0e:5d:83:73:53:ee:e5:25:22:9d:ec:cc:88:c0:79:24:
         0d:ef:2e:78:2c:b4:74:92:9d:8f:e7:04:2b:38:c1:e7:af:f5:
         82:fc:0b:e0:b7:dc:24:f9:b0:c6:d1:2b:c6:ab:cd:05:90:04:
         5f:a3:63:6f:da:11:51:9c:22:11:8e:21:75:50:3b:f2:ba:9b:
         70:ea:ee:9b:3e:8a:a2:44:cb:fb:ea:f3:20:5d:e7:9a:d6:08:
         ef:9d:d7:8d:1f:35:9a:44:79:b9:56:2d:30:ff:27:cf:eb:24:
         60:41:4d:38:f3:58:99:9b:7f:51:2d:dd:b4:08:b8:72:b0:e2:
         69:e3:0e:9e:ff:dc:26:4d:7f:4d:63:d1:09:4d:f0:dc:41:cd:
         5a:82:30:c3:3a:4e:72:f6:91:f3:10:69:ce:9f:a6:d1:67:6a:
         a0:60:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:59 2024 by rpki-client on console-fra.rpki-client.org