Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa
File:                     33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa (raw, json)
Hash identifier:          dfhGckmL/yt9Fh0mXkpcvi5cQtcB2H+IsYJCGPsjTYg=
Subject key identifier:   8C:AF:D3:C9:CB:73:42:9C:2C:94:9F:A7:48:7E:2F:AA:D0:D1:02:7E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584769D0D665146D916F0DD72D00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        170.114.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d6:65:14:6d:91:6f:0d:d7:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=b52979bd-a581-439c-b4ff-033f028491e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:5d:6c:17:09:f5:06:48:b1:a7:b8:55:a5:
                    1e:b6:95:5e:78:9a:9f:87:2e:6e:59:f1:36:5d:32:
                    01:fb:aa:2f:5b:fb:da:75:84:89:9f:1f:2d:42:35:
                    3b:30:d0:43:26:fa:f6:f9:d2:3d:fc:da:91:e9:29:
                    12:1e:66:61:4c:0a:5c:2a:4e:b3:fe:42:6a:ab:78:
                    73:3e:29:b3:ea:92:c1:34:0b:26:98:23:ee:33:e6:
                    91:df:85:43:9f:81:08:53:73:3a:84:4e:26:31:6f:
                    44:01:89:41:17:8e:6d:9c:a6:04:b4:e0:e8:10:dc:
                    d9:ed:9f:b9:5c:15:90:9d:d5:e8:dc:0e:c1:5d:68:
                    f6:31:d5:5a:9d:86:5a:e6:48:f2:c2:73:4f:b3:a0:
                    af:ac:06:7d:c2:03:7c:5c:fc:bf:f3:f3:63:1e:8d:
                    35:cf:e5:5c:8f:9f:a1:2a:ad:4d:ed:4a:a1:1d:fe:
                    cb:79:f6:67:8a:0d:eb:3f:6e:da:90:2f:94:7a:67:
                    cf:96:ca:8b:7d:e0:d1:c9:35:06:f1:59:af:65:a2:
                    58:fd:6c:1d:d2:4f:c1:86:ad:14:59:79:d6:56:c5:
                    33:4f:4e:39:ae:33:47:61:72:ca:29:46:e5:b1:46:
                    a6:11:99:4a:2c:c2:bd:a5:e3:2d:ce:8f:ad:16:07:
                    bb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AF:D3:C9:CB:73:42:9C:2C:94:9F:A7:48:7E:2F:AA:D0:D1:02:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:88:02:47:ac:1e:ef:4f:b1:4a:ee:73:a8:54:8f:ed:5d:
         43:29:f9:95:3c:87:82:15:df:3c:b7:68:0a:e3:48:b4:a7:c0:
         4c:17:ac:e7:ff:93:31:fa:64:50:73:b9:cf:92:f9:e2:10:38:
         67:e3:f4:e5:de:04:75:d6:66:b0:9c:a3:f6:61:05:d9:63:c5:
         f6:fa:b4:a3:d4:f3:0e:9e:fd:6e:54:8e:bb:cd:1b:8c:c2:8e:
         f4:d3:13:0b:aa:d3:84:39:8c:ec:75:a6:10:49:43:12:5f:d0:
         11:28:d0:ca:3f:dc:03:26:3d:b6:24:c1:66:c5:a9:43:fd:07:
         66:2d:1b:76:a9:2e:01:0f:e7:f1:d9:f2:b8:c6:a3:b9:79:a7:
         d5:a5:80:7f:3c:c9:23:08:f9:4d:10:66:93:d4:98:47:18:1f:
         48:50:0b:71:50:10:4e:43:51:f0:63:0e:15:d3:c8:8b:40:ea:
         40:61:c8:2d:f7:00:99:77:37:82:54:1a:2c:36:07:57:dd:46:
         51:7c:b3:17:b2:dc:f6:56:ee:2d:9f:16:c3:91:b8:98:d3:1f:
         6b:1a:b5:ff:9d:b1:1b:89:a7:2e:0f:b4:01:2c:5a:1c:15:7d:
         af:3c:af:54:2b:d5:31:68:35:09:1e:1b:a1:39:a8:1c:ef:83:
         0b:2d:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:53 2024 by rpki-client on console-ams.rpki-client.org