Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa
File:                     495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa (raw, json)
Hash identifier:          80oKbP94UHutqE630T3AsAt85OzL93ebGxlD/X6hL+k=
Subject key identifier:   71:D5:94:68:9E:FE:F8:C1:89:6F:C0:CF:A3:0C:2C:AB:4F:5C:CF:A9
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584795168BFA0460B8BCB9C44600
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        173.199.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8b:fa:04:60:b8:bc:b9:c4:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=1e43fd16-ae4f-4eee-9757-57d99912c8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:6f:2e:14:8f:08:a2:7e:78:10:5c:7e:81:
                    85:c5:7c:48:a5:f3:d4:a4:75:84:bd:4e:58:9b:54:
                    79:26:00:1c:58:03:b2:fd:22:b7:18:6c:70:85:ca:
                    1b:70:6c:5f:95:ad:25:f8:f5:68:26:23:90:ee:36:
                    96:53:f2:2b:86:50:b4:dc:d9:08:ab:c2:ff:f7:d7:
                    35:9c:1c:e8:b9:ad:34:b2:c2:e6:24:e9:37:36:c1:
                    3b:92:96:be:d5:01:0f:83:31:2d:f0:41:77:d5:42:
                    b2:b7:49:28:16:29:03:22:7c:54:70:d6:25:f0:4f:
                    e2:1a:07:19:03:af:ff:21:53:42:8b:4c:ca:e2:93:
                    40:1b:0b:ae:74:51:10:a1:f4:4c:10:b8:ac:91:23:
                    87:af:ba:38:a6:14:4e:79:9b:0c:13:df:c9:fd:a9:
                    e0:b1:9f:8b:94:33:c4:dc:72:9a:f9:f1:6e:4d:12:
                    0c:ec:42:86:c6:e7:f1:f0:bf:af:b6:9b:4f:00:4a:
                    bf:7c:b0:91:93:90:a5:45:50:50:b9:ca:4a:3d:7f:
                    8d:17:6d:4d:18:7e:b2:b0:83:5a:6a:7c:c1:01:46:
                    9c:b0:c7:a5:2c:ed:d7:ef:35:d8:c7:62:53:6f:71:
                    c3:ae:34:15:59:5b:0c:3e:38:7d:9b:e1:73:fa:26:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:94:68:9E:FE:F8:C1:89:6F:C0:CF:A3:0C:2C:AB:4F:5C:CF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:08:87:a6:ab:fb:b2:b1:45:72:57:0a:28:67:ef:49:24:15:
         f0:5c:a9:8c:6c:4d:93:d0:46:6f:00:52:43:3c:ec:bf:56:1a:
         48:79:cd:93:26:a0:28:8f:1c:0a:2d:d6:ed:16:11:77:6b:b0:
         8d:5d:07:7a:b9:f8:4a:74:c0:6f:30:f2:30:da:e2:63:de:bc:
         20:99:f5:b6:23:8f:10:fb:b1:63:b5:99:e4:e9:aa:85:c0:5e:
         12:ec:c6:c1:f6:b9:b8:97:39:cf:ce:43:4c:56:93:05:40:d7:
         d1:30:2b:97:b5:5a:a4:34:9e:eb:8e:d5:b1:d5:e4:9d:a6:5d:
         87:87:1e:a7:25:3a:c0:6b:f3:96:0b:ee:0a:9e:f3:5d:f2:0d:
         9a:68:d6:d9:09:a3:63:b0:bb:3f:3f:1f:f0:6a:29:ea:31:12:
         63:33:4c:f9:e8:e4:69:6e:6b:7b:aa:e5:74:05:19:e1:17:4b:
         35:21:b5:5d:ea:b3:82:3a:86:e7:c8:32:21:ab:eb:df:bd:dc:
         3c:cb:bb:ba:3f:4b:32:d3:db:63:2b:fb:d2:b9:2c:f0:f9:90:
         12:bf:c9:4b:c2:41:a2:f9:9b:5c:9c:e7:a0:97:4b:3c:52:cf:
         77:1d:1f:03:b1:30:e9:f1:30:f0:0b:64:0f:87:90:6c:3c:85:
         4b:d7:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:49 2024 by rpki-client on console-fra.rpki-client.org