Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa
File:                     48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa (raw, json)
Hash identifier:          gV5pEDmm7hCNWoWlMDfBvKgcQtvqcdaUROTYHOe9R+o=
Subject key identifier:   BF:3C:B0:0B:60:47:F4:1B:00:CA:F2:01:CC:60:D9:AA:8E:1C:15:F5
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F432858475910C807AAF8E540A17A28A0
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16276
IP address blocks:        142.44.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c8:07:aa:f8:e5:40:a1:7a:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=26c8b9f7-66d2-4686-869c-56959bd05e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:63:cc:32:9d:ba:60:5e:d5:76:25:91:3e:
                    bb:82:c4:0c:d9:e7:e7:29:50:31:e4:a6:52:33:86:
                    1f:f2:d5:48:90:7d:59:4f:01:bb:c5:7a:57:d7:36:
                    ea:dc:c1:59:d4:f6:d1:81:a1:19:5d:85:bd:40:e2:
                    ab:8d:da:d3:7e:e7:a0:09:ab:e5:51:2d:ed:09:cd:
                    8e:08:7d:b7:19:95:c7:9f:da:9b:97:eb:8a:ea:25:
                    d8:a4:ce:4e:33:88:72:59:0c:4d:2a:d1:4f:93:a2:
                    54:c0:d4:ae:a8:24:02:f1:eb:e6:89:41:a5:73:9c:
                    a1:90:4b:32:da:e1:d1:1b:03:63:a8:17:c2:8c:0e:
                    c5:a4:cd:09:4d:62:37:01:72:08:a5:55:b2:48:64:
                    0a:2e:ff:2d:62:92:a9:43:f3:a1:8f:cc:d7:26:ec:
                    81:65:0b:67:ab:2a:d7:b2:be:a7:f4:7f:e1:6a:00:
                    c3:01:0d:29:a1:ed:47:5d:09:7b:81:fc:e0:93:7c:
                    87:5e:78:08:ff:02:3a:73:be:8c:e5:06:cc:d3:f8:
                    6e:dd:69:32:7b:ec:b9:a1:45:5f:b0:f8:a4:40:2b:
                    ed:84:9c:95:df:2c:67:8e:54:05:5c:b0:ed:aa:1d:
                    e9:82:77:36:90:25:3d:28:0f:ea:5c:ae:33:a4:01:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:B0:0B:60:47:F4:1B:00:CA:F2:01:CC:60:D9:AA:8E:1C:15:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.44.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:23:1b:2b:eb:46:5e:ff:6f:e3:f4:0e:ad:df:52:c4:0c:
         fd:7b:59:e2:2e:61:43:9a:8c:af:b5:85:78:e1:df:69:16:95:
         bb:14:7b:94:24:c1:fc:d3:50:b4:a5:ba:ef:dc:43:fa:d0:32:
         20:5c:85:a2:f3:e8:ce:71:13:ad:e1:81:15:09:fb:99:c4:3c:
         7d:81:7b:43:7c:bb:47:cd:0a:a8:40:c5:ae:70:3b:fa:6b:b1:
         f9:24:34:70:ec:5e:b6:c5:c7:59:93:14:b3:a5:7c:d6:51:45:
         49:7f:bd:78:f4:5d:f5:86:1f:c9:f1:96:86:f7:01:66:fd:66:
         67:fe:46:da:23:b7:6c:c6:ae:fa:8e:33:9f:6d:cc:bd:f0:b3:
         84:73:b7:a2:33:b0:77:5c:cd:b6:48:13:04:0d:e6:ad:e0:4b:
         74:3f:91:99:93:47:c4:b2:93:b0:90:8a:52:85:e0:3d:78:42:
         e5:2b:e0:7c:b2:20:2a:81:a3:ea:a7:88:51:46:be:bd:f7:3c:
         3c:cc:24:8c:7d:64:24:a2:1e:d8:c0:49:d2:d7:a7:0e:bd:eb:
         d2:96:b3:df:05:93:10:ff:01:56:f6:63:95:7d:49:54:44:ee:
         34:59:14:d0:9f:1b:ab:de:80:dc:ae:c8:c1:ac:92:b7:df:6e:
         34:ff:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org