Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa
File:                     ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json)
Hash identifier:          Ku9ilwmFdT53bsWOIvC6SkndH86zN3eMW8b1GoBZJUE=
Subject key identifier:   A9:7C:2C:92:1C:E8:BA:4D:BF:62:8C:12:21:27:F6:E4:ED:66:6A:82
Certificate issuer:       /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
Certificate serial:       010D0C9F4328584784567763635D109A7990D320
Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     11702
IP address blocks:        208.71.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:77:63:63:5d:10:9a:79:90:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=fe262185-8864-4458-a751-37f615596846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:16:22:6b:ed:df:70:46:11:e5:9b:c1:1b:
                    71:e1:a4:6c:34:fb:9f:73:73:5c:13:2c:23:7e:3b:
                    db:ca:b6:79:06:27:75:9a:62:8f:2f:42:74:ea:d5:
                    0e:dd:bc:3f:2a:10:7b:06:1e:2b:9d:77:3b:06:a9:
                    26:9a:95:1f:87:83:f1:4c:b3:f1:a1:1c:27:3c:9f:
                    12:f9:c5:f2:22:90:41:8f:ac:be:9a:8c:9c:41:be:
                    40:ac:94:e3:d1:c6:9e:08:a4:2f:00:56:a1:98:ff:
                    1a:ad:c8:34:7c:66:64:48:56:6b:55:71:e4:1a:57:
                    53:e9:51:81:fc:4f:9b:ef:5e:5d:d5:5d:bb:16:3a:
                    b2:8f:b1:2a:dc:85:35:10:97:52:a5:21:9b:d6:31:
                    df:d3:01:38:ec:b7:55:26:a5:cf:84:a2:bb:78:38:
                    86:b8:e7:96:4e:12:3b:6a:9d:cd:b5:33:3c:5f:06:
                    cf:36:64:63:90:f0:9c:26:e8:78:27:fa:6b:03:5a:
                    c0:ce:bf:f0:80:e8:81:a4:55:39:2e:09:da:bc:4a:
                    30:b6:91:dd:94:45:b9:d6:54:92:8f:fc:d8:81:98:
                    ec:e2:73:02:f2:64:4b:b7:9e:a1:31:38:a4:f2:22:
                    9c:78:bc:02:12:a2:32:26:cf:cd:fe:f3:b1:ba:73:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:2C:92:1C:E8:BA:4D:BF:62:8C:12:21:27:F6:E4:ED:66:6A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl

            X509v3 Authority Key Identifier:
                keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:33:2b:d4:41:7c:1d:ce:70:a1:f2:bc:6c:4d:a7:d8:db:8d:
         51:12:58:4e:fe:31:97:d4:22:36:9f:7d:1a:24:dc:23:cf:7c:
         af:f5:2b:a3:10:dd:ec:66:cf:e5:89:07:85:be:4f:11:18:b1:
         b8:2a:80:b5:43:9c:d8:8b:44:8e:75:96:0d:22:e7:7b:6e:23:
         79:60:bd:44:e9:5e:0e:cf:0e:14:84:08:c1:a1:16:9a:04:b1:
         49:06:d2:b1:d3:0a:dc:e9:0a:22:6e:80:ca:22:0d:a7:7a:39:
         5d:1b:cd:c4:62:2c:74:52:f4:eb:7f:21:d6:b9:97:15:75:76:
         b9:5a:48:8b:2e:8b:18:e9:e6:60:c2:59:7f:78:ad:8f:fe:10:
         35:5d:ec:21:f9:68:1e:11:48:36:ab:1c:59:5d:6e:22:04:f8:
         1d:26:85:2b:35:b6:e1:55:6c:b7:e8:65:87:fb:90:3a:ba:e6:
         45:8f:10:be:fe:71:19:b1:78:9e:b3:bc:b7:c6:ee:fd:3d:c5:
         13:61:26:15:fe:fd:e0:35:09:d8:bf:d8:66:8a:94:4c:1e:b2:
         83:b3:5d:f0:11:89:6a:9d:bf:d6:60:48:cf:0d:15:97:c1:eb:
         0d:ac:48:1e:e6:93:20:b3:d1:20:bc:80:82:cd:81:ad:38:b4:
         12:7e:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:24 2024 by rpki-client on console-ams.rpki-client.org