Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa
File:                     c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa (raw, json)
Hash identifier:          bqPIJ0ZpffqsvhmqySpT3JWE1kme1PX9PK9E9Ppdu40=
Subject key identifier:   B0:A9:5C:06:26:41:42:15:09:33:E2:F2:BF:7C:D5:19:3E:DD:AC:A9
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285847924BE0C827ECD52DCC21DB80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     137922
IP address blocks:        163.120.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e0:c8:27:ec:d5:2d:cc:21:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=e644f94c-965f-4de0-b223-9626cdac9714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:1f:c5:0c:d7:64:bd:9d:84:b7:c9:da:7d:
                    7c:78:3f:87:2e:c5:22:ac:66:c7:3c:94:cf:2c:82:
                    f9:98:3d:c8:9a:b7:7b:08:49:37:4f:7b:8d:46:04:
                    9d:8e:0f:62:ad:3a:81:78:4d:6d:1c:79:48:46:6d:
                    91:14:19:0e:81:6b:fb:b0:0e:27:97:78:d2:dd:e6:
                    d9:ad:f3:7b:2e:3e:b0:24:f4:38:52:d2:fe:29:71:
                    1d:f2:60:fe:93:23:36:42:f4:2c:ff:87:50:d3:05:
                    da:50:43:0a:03:b2:03:9c:40:33:5f:14:61:f5:e0:
                    81:ed:4e:62:e1:5b:4a:11:ab:c3:28:d8:0d:f7:ba:
                    b3:7b:b2:2c:0b:f6:e8:ab:f0:4d:06:83:57:eb:fb:
                    5f:a4:70:68:06:2f:89:8d:34:7b:3b:cd:da:cf:e3:
                    49:3d:5f:59:80:7d:42:22:2f:7c:4f:89:39:09:37:
                    ee:5f:17:20:8b:37:29:6b:92:10:19:68:fa:43:86:
                    95:31:7c:93:d6:de:e8:bd:cc:3d:97:90:ad:0e:19:
                    26:29:94:80:a2:1c:d7:04:e7:7f:51:46:1f:72:d9:
                    0b:8e:f4:76:a1:c6:5a:d5:5c:c6:b0:8e:e4:c8:c1:
                    da:88:45:f1:e6:d5:c7:ea:eb:a3:78:5d:c7:37:a4:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:5C:06:26:41:42:15:09:33:E2:F2:BF:7C:D5:19:3E:DD:AC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:c9:23:e6:0f:46:5e:ef:63:80:f4:a8:26:ea:22:c9:95:
         ba:d7:63:75:1c:23:eb:4b:64:ee:0f:2c:27:70:80:d0:6c:5f:
         75:67:15:1a:07:48:cf:6e:36:ba:d8:38:b6:50:38:d8:5d:5d:
         12:cc:32:45:0d:76:ad:0a:23:9a:36:f6:b6:73:45:8e:1b:f5:
         6c:da:3a:35:56:9c:01:e6:1d:85:0d:09:41:2e:3b:eb:9e:df:
         df:5b:e0:a3:e5:b8:da:ac:2b:e2:a8:3e:49:cb:97:f4:cc:fb:
         aa:ed:c8:a1:1e:d8:c3:c9:50:13:79:8a:e3:df:18:54:94:8b:
         c9:f7:46:c7:0b:ed:c0:6d:98:82:cd:75:c5:9c:fa:fd:6f:2a:
         4f:4a:56:d2:21:5d:23:75:e0:7e:84:ad:69:28:ce:ab:5f:e6:
         63:6d:5a:14:ff:5f:80:24:54:1d:62:e2:eb:85:f2:2b:4c:88:
         2b:0d:fa:5e:18:3f:c7:b9:e2:20:7c:57:4e:62:0e:cd:f0:ae:
         cf:b6:d8:4d:b1:cd:48:16:12:86:30:f7:d3:2c:f0:18:38:45:
         04:03:ab:3c:82:2d:c8:68:bb:d2:8d:7a:29:ee:6b:73:a5:58:
         e4:26:2d:24:0e:bb:15:7b:a9:ce:6a:4a:4a:ee:ef:c6:0b:cd:
         7a:f6:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org