Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa
File:                     1f29933b-b006-3391-ad1f-1b3796f37510.roa (raw, json)
Hash identifier:          tjpH/RpYbaZUIW1HGGonV+5MWg0zMRSs+V/TB7RlJmI=
Subject key identifier:   0B:8A:2D:AB:53:82:3C:01:42:81:79:D0:0D:78:58:A0:51:18:33:8D
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285847B531463A399744B768D16080
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     7018
IP address blocks:        199.58.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:46:3a:39:97:44:b7:68:d1:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=f0ef8c34-527b-409b-a488-8a82e22407c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:a6:d5:c0:dc:3f:95:4d:f3:ea:28:82:45:
                    c4:29:ff:04:0c:9b:ee:a6:5b:b8:03:b3:a5:2d:cb:
                    46:65:fe:34:a1:9a:1f:e9:54:54:18:79:26:b9:40:
                    d3:9e:17:66:26:e9:9e:c9:f3:fb:b7:0d:9e:c9:44:
                    25:3e:c7:68:5d:3f:18:e1:f2:5f:ba:ee:e5:1a:c9:
                    a1:e6:a0:79:28:b9:19:4d:98:c9:d5:69:64:6b:5b:
                    b5:8d:8a:73:68:c0:df:80:2f:eb:82:4b:3f:d9:34:
                    57:ed:64:7c:db:97:99:b7:3e:a9:b9:24:d7:54:c0:
                    93:c1:0c:80:f9:cd:b8:a9:19:ce:63:4a:ca:fc:a0:
                    8a:04:23:a7:91:6d:55:07:ae:2f:58:44:fb:a6:33:
                    de:3c:bb:c6:66:85:a3:fb:ce:60:4f:b5:dd:25:74:
                    be:c8:e7:b2:e1:70:47:0a:54:1c:e7:e9:a4:fe:4f:
                    b6:4a:15:59:d5:f0:58:1c:00:25:cb:85:a2:eb:85:
                    14:4d:6c:83:18:07:36:69:c5:8e:5c:19:15:1b:b8:
                    4c:48:cb:1a:b1:e1:06:6e:56:11:3a:52:e3:b6:7c:
                    0a:30:c8:92:84:99:81:58:20:ee:b4:e2:91:c4:fb:
                    0c:4f:16:26:a6:d8:5d:7e:61:82:ed:68:7b:b9:78:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:2D:AB:53:82:3C:01:42:81:79:D0:0D:78:58:A0:51:18:33:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:81:78:72:34:5a:e4:d1:12:67:7a:a6:ab:8c:a9:a4:b7:b3:
         fa:82:e4:83:42:67:84:f1:0f:72:c6:fc:1f:ea:ed:9e:7e:6d:
         18:16:5f:55:72:d0:73:14:c7:f9:a6:a3:db:f8:59:33:6e:bb:
         ba:64:db:06:4a:67:3f:54:78:f3:e8:55:ba:56:f5:46:a5:a7:
         82:cb:6c:3e:2d:1c:86:4f:f6:34:b4:59:ac:0e:54:95:3e:ad:
         9f:68:73:83:f0:ec:61:0b:64:f3:4a:17:8c:d4:7d:71:01:b6:
         ec:a5:ac:35:f4:d0:d1:52:cd:30:11:9a:d6:e6:81:57:eb:82:
         a7:91:6a:2e:aa:1f:46:8f:fd:ab:bb:94:4c:df:e7:aa:f0:a8:
         4d:09:4e:a2:64:53:55:72:39:ba:72:a6:97:8c:c1:ef:26:04:
         96:cd:55:49:b4:ff:14:1f:ab:10:d5:3b:96:30:9e:f0:91:b6:
         62:d7:e8:e9:66:fc:e0:4b:4b:3e:8e:35:d6:fe:95:a3:38:07:
         21:14:ae:77:7f:62:b1:b9:3b:3c:86:dc:35:6c:32:b3:a4:e6:
         95:96:e3:0f:a4:9e:4a:99:bf:cf:5e:8a:97:96:bb:74:9f:a3:
         36:c7:7b:6a:22:31:ec:5d:05:de:19:a6:df:2c:7f:1c:a2:11:
         42:7e:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:47 2024 by rpki-client on console-fra.rpki-client.org