Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc313fb-5f2b-3d4b-8209-87ec3f50a22b.roa
File:                     efc313fb-5f2b-3d4b-8209-87ec3f50a22b.roa (raw, json)
Hash identifier:          7KDGGCYMfrbA9QZQYYKmXTE7yWgVc5XmEHHbZv3atNM=
Subject key identifier:   06:8A:EC:5A:8E:92:C5:61:8B:5E:11:CE:5A:D2:6A:A7:69:36:9B:44
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847309606AB87BCB726768D9200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc313fb-5f2b-3d4b-8209-87ec3f50a22b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.226.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:06:ab:87:bc:b7:26:76:8d:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=d159dfc1-10d0-4135-b183-0398de429444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:54:83:07:4d:e5:19:ed:65:2b:57:47:e1:
                    96:1f:1b:d5:87:22:cd:d0:d8:39:95:8f:33:86:15:
                    b4:78:4d:42:7b:43:25:86:c6:cf:14:c6:e1:07:2e:
                    d4:0d:83:30:05:76:12:ed:90:17:a2:ac:28:4b:1f:
                    51:bd:7c:da:30:e6:15:82:8f:e6:f5:92:ce:ec:77:
                    89:86:50:af:da:9f:f0:8c:77:67:09:8c:3e:1a:90:
                    f3:f3:9b:60:82:60:b9:4c:9c:b9:0d:69:f0:73:64:
                    ed:85:e6:05:c0:2b:7c:0c:e8:7a:c7:2b:07:66:4b:
                    30:1f:4a:2f:9f:55:c9:cc:89:2f:d9:f5:07:5c:33:
                    4c:33:64:70:fc:82:8c:87:32:4b:ce:23:2a:a6:45:
                    8f:cb:1f:ba:e5:a3:8f:47:a7:b1:f2:0a:2b:a7:31:
                    b8:ef:14:07:61:5a:9e:9b:c2:fb:f1:ac:39:32:5b:
                    b2:83:96:14:fc:8f:5e:cd:93:90:96:5a:4e:09:58:
                    75:5f:2d:58:c3:ff:6b:aa:44:6a:02:a8:98:37:22:
                    5b:26:90:25:72:26:ec:f7:ad:a8:ac:cd:0f:72:77:
                    17:6c:56:b3:90:db:b6:58:33:a5:90:18:a4:c9:99:
                    34:25:3c:b7:71:56:d9:09:48:7a:20:fd:c2:5e:1e:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:EC:5A:8E:92:C5:61:8B:5E:11:CE:5A:D2:6A:A7:69:36:9B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc313fb-5f2b-3d4b-8209-87ec3f50a22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:3d:c1:92:c1:4d:ae:0f:ef:db:cb:66:e6:9b:2f:c2:4f:
         fa:59:a1:39:e4:88:b2:b5:df:c9:53:11:57:c3:9f:55:3a:b3:
         56:72:fa:89:11:2c:a9:76:b0:03:ed:14:dd:cf:a4:de:f2:33:
         50:fe:33:61:8a:b6:5f:55:8e:94:3c:bc:be:bc:0c:ce:52:d3:
         ff:94:c3:4d:77:6f:3f:f6:8b:eb:1c:7c:72:e8:ad:0d:26:3b:
         1f:34:f2:73:05:04:7c:64:92:48:99:7f:81:51:5e:87:c1:b0:
         90:9a:15:f2:2f:1b:07:e9:21:06:9a:40:22:62:c2:77:ef:56:
         d0:62:d0:5d:53:64:62:32:2f:75:b3:87:88:b3:25:1f:31:1e:
         29:d9:8b:c4:68:01:24:70:72:08:a3:5a:97:e0:4c:e1:63:c6:
         91:dc:c6:3e:39:03:8a:1b:d3:63:f6:f7:56:4c:1f:b3:78:17:
         f6:28:a4:cb:59:ef:53:22:5c:41:23:67:d9:df:a4:de:4b:a1:
         8c:29:a6:b0:aa:94:cf:ce:86:4c:c8:e4:99:28:ee:9c:85:a4:
         c4:fb:01:6e:c8:4e:b2:49:ec:0a:d9:ff:5a:9a:de:22:62:1e:
         1b:6b:86:41:50:2d:77:6e:81:0a:12:39:cd:e1:6a:66:56:b4:
         86:d2:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:58 2024 by rpki-client on console-fra.rpki-client.org