Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa
File:                     91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa (raw, json)
Hash identifier:          O3nQunG/FProwfXN8+No3AqYLo6md/Ru8UqYEintOlY=
Subject key identifier:   CC:13:B6:F1:F5:FE:75:6C:BD:DD:EF:35:94:49:F7:0D:2A:3B:3B:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858471BA5AE3226CCD70C910E5240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     36183
IP address blocks:        172.225.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:ae:32:26:cc:d7:0c:91:0e:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=feeb6960-2632-41d4-be90-8949ddc4e65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:94:da:c8:77:a1:b0:de:b0:29:cc:2a:9a:
                    35:76:5f:43:9b:4b:2f:01:18:7d:f4:8a:ac:dd:27:
                    c6:90:8d:44:cc:f1:dd:8c:f6:14:58:a4:b5:b1:a8:
                    98:40:15:40:c8:c8:76:a9:c3:b7:2c:d7:bb:cd:eb:
                    77:84:78:e7:03:a5:1c:d7:1a:bd:fa:c4:cc:b8:65:
                    2c:83:3d:35:85:a9:c5:b7:ec:3c:46:04:bb:25:7f:
                    ef:c6:17:52:fb:94:e2:b1:25:4f:da:9f:ac:48:c3:
                    0a:9b:c0:84:59:69:16:f2:e6:c2:9e:b4:43:fa:0d:
                    72:2f:15:1a:41:89:4c:ec:b1:4a:4a:07:00:5f:c3:
                    3f:95:25:72:86:99:6d:f4:85:73:32:90:4d:cf:c9:
                    4d:4b:79:b6:b2:4d:df:e6:67:88:33:6c:8e:ca:ef:
                    90:63:d7:44:86:ca:77:0f:5d:34:97:fa:2d:1d:4c:
                    88:87:c3:2f:b2:5b:5d:7d:4b:c7:49:2e:8e:17:2f:
                    28:4f:a6:2e:54:77:51:fa:25:5f:d9:05:1e:a4:ee:
                    7a:59:27:d1:0d:8c:79:05:88:b6:d3:1a:2f:73:b0:
                    ff:39:6a:86:29:e1:51:3e:1c:7b:66:35:c3:93:a5:
                    80:a0:f4:71:d5:9a:2f:1a:60:b0:dd:12:90:34:4a:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:B6:F1:F5:FE:75:6C:BD:DD:EF:35:94:49:F7:0D:2A:3B:3B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:b7:da:4c:ce:5a:ba:4b:a6:22:b9:10:dd:a5:a7:7a:c4:
         4e:2a:37:60:aa:96:17:33:9e:45:67:34:ea:02:9c:1b:b1:8b:
         f5:78:87:9a:92:99:47:03:2f:40:c3:14:ee:b2:49:d5:21:a5:
         27:d0:00:d2:15:73:db:46:ac:5c:44:8e:0c:f9:24:82:ec:e0:
         b8:bf:a8:ff:f0:b6:ff:dd:1c:ed:cc:4d:a5:90:44:aa:75:cc:
         fa:75:bf:41:11:74:6f:17:e8:a4:1e:dd:84:1d:d1:bb:07:53:
         31:1c:c6:2f:bd:22:5a:82:e5:96:93:7b:bd:35:d5:91:2d:3f:
         42:0c:9d:69:b8:26:1e:ca:a9:ed:32:3d:66:fc:38:3f:c1:20:
         f8:5f:3a:ac:7e:aa:a0:f7:67:50:7b:e5:b3:2d:8b:4c:f8:58:
         da:46:70:f8:56:26:e1:08:d0:71:c0:dc:54:93:28:53:ea:e1:
         27:09:e1:6f:cf:0a:c4:3f:f6:da:b7:68:47:ee:1d:b0:e2:c5:
         fa:db:71:21:c2:c1:d6:86:71:2e:4f:92:e5:93:9e:2d:89:ee:
         a1:34:60:08:27:75:4b:c8:82:7f:d8:b4:94:ce:b3:6e:56:bf:
         fb:84:2a:7d:11:ea:7f:7e:43:e9:64:24:c9:81:80:fb:82:c4:
         36:02:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:51 2024 by rpki-client on console-ams.rpki-client.org