Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa
File:                     1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa (raw, json)
Hash identifier:          tr23jI9g49Zi6qH7v10b5eXBWPQTFdeNgeI0bMyuL/0=
Subject key identifier:   E9:25:11:B4:0C:17:4A:BE:36:77:24:4A:9D:77:53:2B:DC:81:CC:45
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584762D64CCC0F31BC136C69D190
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        216.219.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4c:cc:0f:31:bc:13:6c:69:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=0c9e43b1-165c-4dfd-812b-fd90594d1e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:8b:e8:a6:14:8c:0c:0e:fe:14:d9:78:a8:
                    2a:6f:e8:ef:b7:1a:37:3a:0f:88:3c:09:1d:7e:9d:
                    33:94:cc:6a:52:e7:ca:49:94:70:bc:43:0b:70:90:
                    0c:0b:b2:11:46:aa:d1:67:f5:3c:16:4d:a8:07:e3:
                    df:aa:a5:5d:18:a9:cd:8f:e5:08:ad:45:94:d1:8a:
                    a4:17:c1:34:15:76:57:f2:ad:58:4b:7c:9a:48:9b:
                    f4:b7:97:a8:5d:d9:52:82:58:fd:8e:7e:bc:bf:2f:
                    41:30:7e:e4:e7:bd:49:d9:05:29:e9:e0:1b:19:7e:
                    6c:44:e5:16:b5:62:9f:99:90:4c:cb:a5:80:20:4e:
                    1f:f9:de:be:99:b6:79:5d:e6:d2:e4:8a:16:95:57:
                    57:81:8b:7d:30:12:09:11:c0:29:89:7b:c8:00:be:
                    2e:b8:8f:b0:d1:58:2f:d0:c2:a2:b1:d4:f6:1c:a1:
                    1a:73:ed:76:ad:bf:a2:e7:e1:41:2d:3d:d7:e1:e6:
                    b9:4f:a1:3e:62:e0:1b:4b:b0:f5:38:03:73:e2:dd:
                    e9:1c:c7:be:c5:fa:d0:bd:ce:ce:04:c0:d7:6c:0a:
                    ba:a1:0f:cc:ab:50:b0:82:87:ad:2d:2c:84:dd:fe:
                    fc:e9:69:f9:bd:fa:95:e0:df:18:80:7e:6e:b0:a4:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:11:B4:0C:17:4A:BE:36:77:24:4A:9D:77:53:2B:DC:81:CC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:99:fa:16:f5:00:d1:61:91:ea:a8:82:b7:05:9c:0c:c1:42:
         f5:66:29:55:b7:5e:4a:bf:98:0a:bf:d8:90:74:b9:fa:72:53:
         37:39:f8:11:df:22:6e:77:f8:6f:31:d3:e8:51:b6:fe:5b:47:
         4d:22:02:8a:50:ce:b5:4c:9e:35:4c:30:2e:f8:6a:98:5f:30:
         eb:0d:74:25:b1:38:2b:f2:3f:df:1e:4d:78:08:aa:5c:5b:7f:
         b2:63:74:4c:7b:47:ce:37:37:6a:6a:83:e9:41:39:21:30:b6:
         16:4c:80:24:91:a0:17:46:39:06:90:5a:a9:8b:66:30:23:cc:
         dd:20:48:bb:57:0f:d1:67:fe:9a:10:ad:0a:3a:17:ae:1c:18:
         00:ab:8a:c7:48:d8:5a:28:c5:65:97:30:13:c8:24:dd:52:87:
         4b:2c:a5:3c:da:32:61:6c:60:50:35:d9:c6:b3:65:0c:df:08:
         4d:2a:c2:02:b5:64:c8:ba:90:1d:38:84:25:b4:34:0a:ca:10:
         aa:fc:81:46:41:52:fd:e7:c7:ae:5f:25:44:b6:66:b3:6b:61:
         a5:6c:ee:21:bf:44:85:0c:90:ad:f2:cb:67:1e:66:41:7f:99:
         35:4c:9f:37:c8:48:76:d1:80:bb:1e:fc:7e:c6:56:19:03:28:
         26:15:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:49 2024 by rpki-client on console-fra.rpki-client.org