Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa
File:                     f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa (raw, json)
Hash identifier:          nivMv7xTimf64cbOByum5g8L1yjz1EP3Wxa3rj0MsGI=
Subject key identifier:   EA:20:78:62:97:E3:A0:AE:67:F7:8C:F8:94:01:DF:F1:07:86:77:00
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F43285846D5DA8ABD2BF9FB2025C99C00
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa
Signing time:             Sun 11 Aug 2024 01:00:28 +0000
ROA not before:           Sun 11 Aug 2024 01:00:28 +0000
ROA not after:            Sat 09 Nov 2024 02:00:28 +0000
asID:                     36184
IP address blocks:        205.167.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d5:da:8a:bd:2b:f9:fb:20:25:c9:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Aug 11 01:00:28 2024 GMT
            Not After : Nov  9 02:00:28 2024 GMT
        Subject: CN=98ba95ac-3970-4384-8910-bcd0a6972483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:7b:ee:90:04:81:44:3d:06:8c:39:ae:d3:
                    e1:b0:d4:44:12:23:25:9e:3c:5f:84:ed:41:14:f8:
                    2a:07:a4:02:70:49:b3:e1:93:24:ec:14:c6:ab:ad:
                    4d:0a:d8:79:79:30:cc:94:61:3c:2d:f4:03:bf:c6:
                    fb:ff:83:08:b0:c2:cc:91:2c:09:01:13:5f:7d:09:
                    d9:96:97:c2:ef:4d:60:ad:39:a8:8c:94:f5:89:bc:
                    56:d8:8d:8e:ac:e1:c2:cb:cc:fc:d3:92:8e:f5:d0:
                    e1:e1:d0:1d:7b:70:58:d7:3e:db:48:74:dd:85:16:
                    c5:e2:d9:55:44:85:21:70:16:a2:ff:1e:88:f2:74:
                    5a:fb:de:9b:88:93:db:d1:92:42:3f:0e:3c:b1:01:
                    a3:8a:0c:9e:3c:0c:9a:5b:85:05:2c:be:40:70:83:
                    ac:f3:0e:ee:6e:8d:b2:3d:16:90:3c:aa:ee:9e:1f:
                    81:b3:54:a1:1c:a7:16:eb:d4:f6:84:e2:63:b1:b7:
                    25:33:35:fc:5d:5f:c1:99:00:23:15:23:e2:27:34:
                    87:37:37:d6:a0:44:31:45:1c:1f:cf:41:ff:93:24:
                    a2:23:d5:c2:d1:90:a7:67:2b:eb:69:59:a8:83:11:
                    a6:3f:ff:27:92:5c:c0:8f:4e:a3:21:b6:99:5e:10:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:78:62:97:E3:A0:AE:67:F7:8C:F8:94:01:DF:F1:07:86:77:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:aa:53:fa:80:aa:8d:8a:ca:e4:3f:b0:d6:f4:f2:ba:e5:
         78:cf:1d:56:bb:df:8f:e9:97:4e:a9:f4:76:02:d1:e0:60:0e:
         b8:f3:bc:9e:0b:7e:32:ba:97:78:39:80:94:77:b1:73:36:ee:
         1b:78:a4:79:dc:ae:cf:a5:5a:d6:b8:ba:b3:5a:82:9c:1d:55:
         6b:17:2a:90:9d:12:77:f9:37:62:b1:c6:03:6f:0d:04:5e:f6:
         e3:4a:19:26:ca:3f:66:e0:f5:61:8b:2f:4a:e1:a7:ab:3b:d8:
         18:42:aa:a6:2f:1d:1d:48:ca:9c:a5:16:ad:ba:ea:67:4f:e3:
         17:36:8c:b4:63:4c:69:a4:eb:1f:3f:2b:97:d5:2e:6b:89:45:
         da:3e:c6:5a:5b:ff:a9:ba:51:57:73:cd:5e:1e:c6:ce:c0:04:
         c2:c3:a8:15:71:fb:dc:e6:6f:de:e7:bf:7a:4c:f6:d0:68:21:
         37:1d:ce:f7:e5:0d:9b:cb:50:50:c2:a2:d0:23:0e:1d:eb:83:
         f3:3d:91:6e:e3:36:1e:2c:0b:f0:7a:37:26:40:dc:8c:d0:ed:
         4f:07:40:de:dc:9c:3e:cd:d9:6f:cd:a8:5b:8c:5f:1e:04:0b:
         4c:0b:84:b8:3a:7d:e9:6e:9a:c1:a8:69:07:ac:b4:e9:9a:76:
         60:f6:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:09 2024 by rpki-client on console-fra.rpki-client.org