Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87a3061-e5fd-335b-affd-a8055fe5c2b5.roa
File:                     d87a3061-e5fd-335b-affd-a8055fe5c2b5.roa (raw, json)
Hash identifier:          /APfIPA0xCJZJwz2A3gEfZpYR1dNh2gj8uxfZj29vss=
Subject key identifier:   7B:E7:11:7D:F1:69:8D:70:B1:26:0A:33:94:8A:C6:CB:8E:FD:05:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6343B333E2A6A6C9C400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87a3061-e5fd-335b-affd-a8055fe5c2b5.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36833
IP address blocks:        184.105.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:63:43:b3:33:e2:a6:a6:c9:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=a45d31a6-8d12-42ac-a688-deaca3c67323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:2c:c6:6f:fd:db:23:b4:4d:c6:39:aa:bd:
                    ef:c4:be:74:87:58:bd:4f:04:ca:c0:98:7d:a0:c0:
                    22:b7:e9:60:7f:f9:5b:50:b2:05:5c:c2:f3:7e:59:
                    0c:a6:85:bf:c1:95:ed:41:8d:84:86:13:b3:a6:1e:
                    f0:ac:bc:24:57:8a:db:d4:79:12:04:db:2a:81:c9:
                    a2:5c:4b:46:b2:e3:0b:d5:d3:01:c9:ab:27:1a:e9:
                    39:c3:b3:2b:5e:36:53:1a:b0:2f:68:39:81:5f:20:
                    5e:cc:4e:a7:b4:23:5d:88:c5:ee:b6:25:d6:4e:0d:
                    3f:20:ae:b0:0d:d8:a1:c8:25:47:e1:1d:aa:a1:43:
                    83:27:25:e3:56:5c:1a:c3:c5:14:b1:09:37:84:6d:
                    18:22:c2:5b:51:f6:fc:16:c0:ab:80:fc:60:dd:23:
                    c4:c9:a4:eb:0f:3c:08:e3:d3:6d:e0:51:ec:10:f3:
                    41:9f:2d:d3:ff:ef:69:4b:4a:0f:0d:e2:0b:f5:94:
                    ac:f1:46:2e:e5:c4:a1:9a:39:26:84:2a:f2:3b:ae:
                    d2:8f:2e:e6:c8:1b:ce:2b:82:b9:36:2b:66:8e:67:
                    56:e0:c5:57:92:1c:c8:3d:8e:64:ee:5a:79:fd:5b:
                    e5:c5:c1:3d:35:cd:b5:b4:bc:94:39:fb:58:1e:aa:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:11:7D:F1:69:8D:70:B1:26:0A:33:94:8A:C6:CB:8E:FD:05:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87a3061-e5fd-335b-affd-a8055fe5c2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:8b:31:97:5b:23:b1:eb:ed:20:10:44:d2:e2:12:38:f7:
         99:b2:b3:ea:45:4c:09:d7:b4:77:5a:7e:1f:23:bf:08:49:68:
         5e:04:7e:f4:64:97:d4:c3:f9:f8:bb:ee:14:d9:e5:db:04:2c:
         05:7a:fa:5a:fe:90:d3:bd:fa:54:32:aa:12:51:70:8f:d5:a0:
         36:32:10:5d:bd:78:a3:86:28:66:36:3b:98:13:f9:e9:b7:8e:
         27:3c:3a:28:a6:79:6d:19:a3:30:61:50:f3:fc:16:c5:1f:62:
         b8:4f:6e:74:82:83:45:89:f6:12:d8:72:4e:d0:c9:a5:1c:7c:
         71:b5:56:eb:b6:26:52:67:54:00:8e:13:9e:94:00:54:04:c5:
         76:75:22:32:23:0b:be:65:52:a3:89:31:8d:43:ca:70:2a:e1:
         cc:ab:08:92:c4:56:c3:c8:de:3a:01:43:65:6c:ac:ae:9b:8c:
         67:98:43:7c:e4:13:a0:ef:6b:cb:c0:8e:9d:59:ba:90:7d:a9:
         64:67:76:cd:53:65:7f:f9:13:75:e2:f9:a2:53:51:fc:80:ca:
         60:2c:a2:d8:4f:f0:1e:ff:dd:b6:15:41:92:d1:e1:08:9b:7f:
         ca:27:69:f8:72:d6:31:22:69:3a:52:cf:c4:78:fc:ef:de:e8:
         e8:76:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org