Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/7db14fb2-f8a3-336c-8c35-be9734eb23f2.roa
File:                     7db14fb2-f8a3-336c-8c35-be9734eb23f2.roa (raw, json)
Hash identifier:          H/Q6UAFr3ow4N77x0S2QvUdX0w8X+gYbxGSj8wdmv6Q=
Subject key identifier:   31:B1:A7:C1:58:70:0C:41:D8:7E:37:A6:5E:41:13:39:77:75:27:A2
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285847AE36B36158310E7B5E5B1F80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/7db14fb2-f8a3-336c-8c35-be9734eb23f2.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36103
IP address blocks:        208.101.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b3:61:58:31:0e:7b:5e:5b:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=1e53fc2a-ab63-4bb5-b037-ca78433738d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:39:dd:fc:51:5d:af:17:fb:3e:8b:6f:36:
                    a0:fa:a2:79:5b:34:a8:16:c6:7f:36:5c:52:4c:f9:
                    e3:65:50:af:53:ef:56:08:e2:0b:2f:f3:93:82:85:
                    bb:c9:52:c4:29:89:7b:42:89:de:a3:b4:3b:98:ad:
                    83:e1:d5:51:ed:e0:4a:ab:15:02:e0:de:8a:5d:4b:
                    32:b4:1d:72:ef:c7:72:04:e0:c6:6b:47:70:7a:40:
                    19:ec:23:0f:5f:80:2e:9c:6e:9a:22:c5:32:64:c0:
                    ca:3e:bb:2d:a1:ed:cf:87:c2:c2:04:52:83:34:ed:
                    c3:37:b3:09:52:57:e3:ad:3f:ac:f7:c5:f5:d5:1d:
                    aa:8c:36:a2:e4:3b:ce:7a:48:7d:f6:8c:d0:6c:83:
                    76:4d:48:a6:f0:8d:cf:ed:40:53:64:26:3e:1f:e8:
                    85:39:93:f1:1c:12:cd:fb:e3:8e:9b:bc:a3:78:b2:
                    9f:45:b7:de:7d:7c:ef:15:3d:58:b9:11:73:70:4f:
                    b3:5c:52:b4:bd:fc:ec:b1:7e:f0:ea:fd:37:dc:db:
                    2e:7b:ab:7a:5c:c7:b7:c4:f1:b0:d1:96:48:1b:65:
                    b1:9b:d3:d9:be:d4:bd:0d:da:03:48:60:aa:b2:5b:
                    b7:dc:6c:e7:26:97:1c:6d:a1:10:cf:19:59:c8:33:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:A7:C1:58:70:0C:41:D8:7E:37:A6:5E:41:13:39:77:75:27:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/7db14fb2-f8a3-336c-8c35-be9734eb23f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:bf:35:a9:d9:48:6e:70:88:b1:83:d1:49:d4:bc:90:6d:
         3b:50:2c:5c:20:ce:62:d7:65:f0:8d:c4:12:8a:9c:3d:74:35:
         02:cc:97:92:63:58:b2:99:c8:03:df:12:d4:e6:3f:87:6a:75:
         b4:11:a4:9a:0a:9e:d4:8c:46:ae:45:81:b4:ca:74:5b:0d:6a:
         65:de:ca:68:ef:9d:5d:da:03:29:ae:a0:83:0d:1b:5c:3c:23:
         ad:ee:b4:e0:7e:75:39:ba:24:2a:40:88:8a:b0:bf:8d:14:50:
         16:77:69:01:3c:a6:4b:33:bb:13:91:42:09:16:03:51:c8:09:
         7d:29:a1:30:90:4e:3c:87:ab:43:54:a2:c4:70:93:64:b9:ad:
         b7:2b:db:ac:bc:45:8d:4c:5f:74:9a:38:6c:c5:b0:5d:0b:c1:
         1f:5c:6b:e0:cf:62:c4:4b:1b:ef:ac:a6:b2:76:ed:f1:ab:01:
         cc:6a:d7:06:3b:15:79:fe:1a:67:57:b4:1b:2c:5e:00:d3:30:
         63:50:b1:c4:dd:50:90:7f:c0:7b:2a:67:9b:97:1d:c2:8a:61:
         74:e9:44:d9:aa:28:0e:72:16:e0:3d:a9:3c:0f:63:3f:24:08:
         f3:2d:a8:ef:bb:4a:5e:e8:d4:c7:e1:49:2b:31:54:08:f7:e1:
         aa:7e:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:35 2024 by rpki-client on console-fra.rpki-client.org