Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e223a754-c235-3660-8367-92e718c779c2.roa
File:                     e223a754-c235-3660-8367-92e718c779c2.roa (raw, json)
Hash identifier:          ycfEL3mgc438O7sHTP/xcoGgAnhZgqVtP4jzp5LQTJk=
Subject key identifier:   0F:51:93:CA:C1:02:BB:64:41:CB:70:04:A5:B0:97:F5:1D:49:5C:F5
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285847AE36B2FD0EB5BC7624810B80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e223a754-c235-3660-8367-92e718c779c2.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36103
IP address blocks:        202.69.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b2:fd:0e:b5:bc:76:24:81:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=4375ac4a-e63d-43bf-a825-ca43f6320319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e5:53:0e:c9:02:bc:9a:fd:9c:85:8e:80:f3:
                    17:ac:ce:e6:4f:be:42:d8:93:8a:07:c0:68:10:7e:
                    e1:42:43:41:27:b7:c0:4a:50:f0:a2:a3:f6:cb:f2:
                    18:b0:83:f0:5f:ee:38:85:36:27:da:3d:be:15:9d:
                    bf:9b:b7:e8:0b:a9:b2:4c:51:b8:5e:d7:03:19:34:
                    9e:59:f2:5d:22:2b:7c:cd:47:4b:ac:0e:f6:05:75:
                    27:a1:f9:07:dc:bb:da:0a:ad:7a:05:b4:18:50:35:
                    02:0e:80:72:64:fa:f5:b8:2d:3e:59:fc:7c:3f:34:
                    80:e9:40:67:fd:f3:ed:57:6c:8e:9f:ee:d6:05:84:
                    9e:87:36:1b:6a:63:ec:f1:40:4b:a2:a6:1b:71:0e:
                    ac:ab:87:80:68:20:28:70:8f:cd:87:42:98:a0:5d:
                    fc:c3:50:9d:92:e5:b0:d1:9f:56:6e:1e:a5:bb:03:
                    b0:3a:b1:a8:3e:58:04:16:61:9a:9e:b0:23:ff:bc:
                    ff:ec:0d:14:76:77:37:f2:13:63:1c:8e:df:a2:4f:
                    ea:6b:cc:a7:d7:68:4e:56:fb:06:ee:e0:f9:59:c7:
                    51:d6:4e:03:94:56:69:b0:1b:33:d4:57:60:91:ab:
                    60:65:14:85:f2:eb:4f:f9:ce:1d:cc:2d:4e:99:e6:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:51:93:CA:C1:02:BB:64:41:CB:70:04:A5:B0:97:F5:1D:49:5C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e223a754-c235-3660-8367-92e718c779c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:34:4c:2b:7b:90:0c:97:b6:7f:19:7e:1e:ed:7c:7e:a9:73:
         76:22:8c:61:4e:48:df:59:ff:07:53:51:35:2b:99:7d:8d:e6:
         d5:f9:8f:13:48:63:78:55:c5:16:65:f7:74:60:5c:27:71:f7:
         a1:3e:6d:2e:4c:23:b3:8a:37:bc:2f:1a:fd:32:46:e5:28:bb:
         66:dd:04:41:29:6c:56:fb:c4:90:a0:e0:e1:36:e8:4c:17:0a:
         fe:0f:f0:e9:2d:f8:23:28:31:19:00:2f:15:49:ae:f7:ca:6b:
         46:5c:41:e2:d6:84:ac:a5:6b:bd:b4:7f:92:e2:0e:14:86:cd:
         65:f3:ac:52:84:ae:0c:b6:15:50:ba:3f:37:91:77:b8:3f:12:
         c9:26:29:6f:68:ab:7b:4c:d0:ff:9b:d7:c6:ef:da:6f:87:c8:
         1d:46:7b:f3:b8:46:97:a5:9c:fd:6c:ac:c6:10:84:b8:0b:46:
         a0:b6:21:04:83:ed:08:38:03:ad:33:76:a9:c7:e9:9e:74:5f:
         87:4c:65:42:ec:92:1c:45:03:b0:e3:17:f2:ab:06:5d:1c:4e:
         07:be:87:fa:bf:92:6c:5f:30:20:f2:b9:12:11:85:05:e9:58:
         e5:2f:ce:8a:b5:9d:a7:51:9f:f1:75:52:94:30:4b:04:60:08:
         89:32:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org