Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
File:                     2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json)
Hash identifier:          W5lBsbf/MI6kwsti9u8PwNrUmkcFNQGmtHiljgxGWuM=
Subject key identifier:   42:C4:F0:EA:9C:52:1A:38:8D:1B:4B:8B:88:7E:9B:F5:56:59:92:0E
Certificate issuer:       /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial:       010D0C9F43285847564605F8C2EF83B495917B80
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     400790
IP address blocks:        207.228.217.0/24 maxlen: 24
                          2606:f6c0:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:05:f8:c2:ef:83:b4:95:91:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=336a75a9-479d-4937-875d-54f85593a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:c3:97:fc:ab:5b:bb:d8:cb:39:2c:d1:51:
                    c7:dd:98:22:f0:d5:24:bc:c6:b2:96:4e:c8:90:94:
                    a9:a0:43:20:4e:60:24:e8:8c:80:f1:03:58:f8:ae:
                    03:65:e2:a0:f0:da:31:65:72:66:5a:f0:8d:32:39:
                    7c:99:0d:f6:a0:64:35:8d:b4:db:22:38:82:33:f1:
                    e0:2f:25:1b:37:df:83:a9:9a:70:ce:65:57:b3:17:
                    05:64:8c:97:ff:aa:28:7e:22:de:1b:08:d1:56:63:
                    07:cd:aa:8f:00:7e:5f:47:a9:fd:ba:da:d9:3b:4c:
                    9f:80:51:ea:c4:91:f8:6a:4d:60:d4:3d:00:62:c1:
                    ac:13:df:1e:ac:42:4b:4f:2f:47:ef:fa:e0:05:01:
                    67:7d:9e:32:25:19:c4:c8:87:ad:e3:18:89:64:ce:
                    d9:be:8b:23:79:4d:7f:fc:39:f6:f5:b5:c6:c9:30:
                    ec:d7:69:dd:46:87:14:05:0f:05:bb:c5:de:95:43:
                    7a:9f:d6:8a:54:89:d5:7e:86:9c:48:b9:0c:29:2c:
                    6c:aa:43:c8:0f:bb:82:bd:74:9e:47:ce:d3:2c:f8:
                    39:5a:c6:34:ed:cf:3f:09:9c:e3:fd:2e:5f:45:80:
                    c4:02:14:0b:6b:86:1a:49:ad:90:81:94:9f:e5:25:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:F0:EA:9C:52:1A:38:8D:1B:4B:8B:88:7E:9B:F5:56:59:92:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl

            X509v3 Authority Key Identifier:
                keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.217.0/24
                IPv6:
                  2606:f6c0:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:09:71:3d:0f:fd:9a:4d:2c:8c:69:ce:53:31:ef:22:ae:
         f2:e9:26:0f:fd:0a:47:d4:98:74:df:37:47:78:d0:a1:6e:d3:
         eb:b8:b2:55:e1:12:e5:0d:2f:48:e2:96:6e:d4:29:c9:a8:29:
         cf:3d:24:1f:cc:a5:c8:1b:2f:71:b1:da:a2:fd:e6:5d:6a:8a:
         df:78:11:27:51:07:d9:77:d6:2f:73:fa:27:e9:bd:0c:f0:ec:
         a5:31:f8:8f:61:6a:90:b7:5f:74:b8:9d:20:27:0d:8f:7d:a0:
         bb:1a:3f:84:f9:68:1b:2f:6e:5d:12:a5:5c:a3:87:be:e1:ff:
         8c:03:87:21:d5:da:3a:98:5f:06:87:a8:48:7a:25:54:6e:97:
         f1:64:49:df:3e:e7:d3:9f:4c:28:ee:97:f7:2c:0e:ee:f6:04:
         5d:4f:a7:54:f3:3e:94:ac:42:83:23:77:64:c8:33:1c:75:8c:
         1c:46:95:a4:97:47:9f:90:d2:c3:09:93:bd:b0:df:16:2f:f9:
         04:d2:76:7b:7c:98:ba:5d:b0:49:cb:35:78:04:b1:3f:14:11:
         7a:af:ad:6f:37:80:a0:7e:27:53:3c:8e:e9:eb:92:ab:6d:bf:
         53:a9:4d:ef:73:c5:63:e2:00:e6:88:28:0c:44:f4:cf:2e:bb:
         88:03:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org