Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d9e295-5080-30a5-91d5-4ded7cca8656.roa
File:                     c6d9e295-5080-30a5-91d5-4ded7cca8656.roa (raw, json)
Hash identifier:          AjvWwq3YVU27UqUF2EiYrPSxi0oSRp9ZaBtXHvJEn/8=
Subject key identifier:   14:98:F6:B7:17:5E:77:AB:7E:CF:E1:8C:5B:0F:CE:24:FF:44:19:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584574B30DFC0D6F0AC57EF9C800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d9e295-5080-30a5-91d5-4ded7cca8656.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     36183
IP address blocks:        172.224.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:0d:fc:0d:6f:0a:c5:7e:f9:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=c1b2415b-dba2-4c0c-a291-ed1ffd90d5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:c4:2d:a3:a2:a4:67:18:0d:ad:60:cf:78:
                    bd:9f:ea:75:d1:af:70:4c:47:e4:e8:67:a3:5c:1d:
                    5d:33:94:90:33:85:76:34:12:71:74:45:c1:3a:81:
                    1a:93:c6:30:4d:1f:fb:d6:9d:33:70:8b:41:e4:86:
                    29:04:88:ad:85:69:22:94:3e:25:eb:f6:f7:d3:93:
                    e1:9c:34:b1:00:c7:9a:e4:a5:40:54:4c:25:04:a0:
                    38:c3:32:a8:59:df:91:1c:d2:f1:79:6e:13:90:47:
                    3b:20:55:c2:86:b1:f9:d6:c9:8e:df:f5:3d:e9:3d:
                    9b:46:cb:b8:d1:b0:ac:d5:b2:e7:95:ca:25:6c:26:
                    59:b1:7a:71:f4:c7:d2:20:c6:bd:61:47:32:e8:47:
                    40:50:05:ee:3e:2e:18:ab:fb:4b:33:08:05:4d:e6:
                    72:d3:73:46:be:39:ae:d4:ed:26:30:1e:40:0e:90:
                    38:6d:16:0e:54:9c:1c:58:fc:b0:ad:f8:68:31:ff:
                    12:4d:f1:d7:5a:ca:37:a8:50:21:74:02:8e:5a:fe:
                    cc:fb:1d:02:31:0d:b4:45:91:53:78:d1:62:38:2f:
                    8b:55:28:e2:1c:89:4f:72:e5:6c:d0:39:e5:0f:58:
                    b5:5c:6d:2b:49:ec:19:f0:e4:c0:5b:93:f5:54:7c:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:F6:B7:17:5E:77:AB:7E:CF:E1:8C:5B:0F:CE:24:FF:44:19:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d9e295-5080-30a5-91d5-4ded7cca8656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:29:64:5a:d4:96:10:ef:46:d5:6a:3b:d8:f6:ba:b3:6b:
         fe:e9:1a:00:2b:bc:6c:e7:0e:8f:86:20:dd:38:9d:e3:1f:ea:
         67:c9:21:b6:85:a5:06:3f:ca:9e:55:c4:44:ae:85:f5:73:41:
         ca:fe:50:0a:55:51:63:81:ca:e9:45:1a:3c:2b:f2:7f:4f:ed:
         8f:07:2a:a3:29:58:fa:21:93:2f:18:28:bb:73:3c:d6:28:56:
         af:ad:f4:fa:6b:61:68:95:d8:a1:9d:7e:71:6b:24:a8:66:d6:
         e2:fb:18:dd:40:f2:ce:b0:75:61:e5:ce:d9:ef:04:04:1b:1f:
         0d:c7:da:27:52:f5:2e:9a:a5:13:e1:2e:49:cb:3a:50:94:fb:
         9f:44:ad:fd:fd:01:a9:37:b2:e4:a1:c9:b5:63:1f:f4:29:a4:
         ec:33:5b:61:0e:70:ef:51:e7:6d:cf:a5:e7:43:a6:af:da:44:
         2e:55:09:f2:e2:dd:50:16:e6:6b:e0:10:65:b9:cb:bd:9c:25:
         af:16:5f:6e:92:2c:14:55:1f:41:b5:af:bf:72:e5:80:28:97:
         f3:e5:18:ce:9c:b3:73:c4:03:2b:eb:ad:e4:ad:c3:57:69:3b:
         57:a1:f8:a0:b3:76:ba:22:d5:a5:01:42:51:d8:40:b4:6a:e0:
         f1:4c:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:01 2024 by rpki-client on console-fra.rpki-client.org