Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
File:                     d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json)
Hash identifier:          95nvKasNs6awiuSp2jAdfuDL5nWUq8bOysPGPo5SaZE=
Subject key identifier:   60:48:BD:89:62:46:D0:61:45:0D:40:78:66:94:B4:19:49:E2:6C:A5
Certificate issuer:       /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial:       010D0C9F43285847B531489B879C99E67AF9E640
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     40628
IP address blocks:        204.61.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:48:9b:87:9c:99:e6:7a:f9:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=78c39206-b4f4-431b-a884-9e0fa9c2efcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:14:94:92:12:e2:bb:12:24:e2:73:b9:80:
                    26:68:5f:53:54:cd:57:f1:8b:51:fd:79:79:0b:37:
                    ac:a8:01:9f:dc:66:43:5d:0f:dc:4d:a3:35:7a:d8:
                    d8:10:ca:21:19:9c:36:35:73:af:ac:39:8c:29:0f:
                    f7:14:28:fe:61:36:e0:9c:62:68:b1:b3:d2:95:6f:
                    91:b1:3d:04:7d:27:e2:54:6e:65:5d:7b:4f:43:b3:
                    60:39:6e:8e:6c:04:e8:ad:b5:03:3c:57:d9:87:57:
                    79:42:4b:3d:de:00:21:ce:3e:0b:e6:df:01:f1:9a:
                    5d:e1:2b:05:d3:a1:f6:c7:58:8d:0b:ce:c1:e3:2e:
                    10:c1:e9:f9:f1:5f:56:af:b5:73:61:21:17:82:32:
                    1f:e7:74:a9:e2:f1:82:1a:96:a0:26:e3:a4:ab:3b:
                    d8:67:df:0f:04:24:08:fd:78:32:f4:91:de:52:60:
                    78:af:db:00:ea:3f:09:8a:26:3f:d7:33:ba:ee:e6:
                    33:63:e5:6f:80:f3:d5:5f:a6:3e:ea:8a:26:57:84:
                    87:98:ff:c7:f2:1a:a3:ef:c7:b5:58:58:7d:8b:81:
                    97:9c:df:90:0b:6e:68:fb:55:37:4c:77:b6:23:1a:
                    50:7f:7c:04:52:4e:24:48:ee:66:6b:be:5f:d3:ea:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:48:BD:89:62:46:D0:61:45:0D:40:78:66:94:B4:19:49:E2:6C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl

            X509v3 Authority Key Identifier:
                keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.61.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:48:5b:74:aa:5a:7d:b1:fe:ff:6e:77:58:60:96:c8:fd:cf:
         a6:01:8c:b4:f7:32:b0:0c:81:65:cc:f3:56:98:a7:a1:6c:b7:
         be:6e:e7:a0:9f:68:9e:63:af:1e:ac:04:d8:d6:cc:75:a9:21:
         42:79:66:14:dd:36:34:6b:39:46:b7:ce:ca:bb:e0:de:68:7b:
         a3:d5:6c:1a:b5:1a:db:ba:05:bd:28:3d:fe:c6:fb:01:74:27:
         e1:d2:aa:34:e9:47:d1:d6:c4:2e:ee:1b:44:53:f5:1d:ba:66:
         cb:05:be:e0:05:05:8a:dd:50:47:8f:df:fe:63:e7:4f:84:e8:
         e5:79:fc:a5:69:f6:01:4e:b2:d5:83:1d:a6:62:45:44:31:b4:
         5e:0d:f0:e6:2e:09:c5:64:61:79:fe:1c:6f:e9:49:a5:0d:b5:
         12:11:c0:b6:50:6b:fb:c6:dc:1c:21:b4:6f:2a:98:fb:d4:f7:
         a4:2a:73:98:d8:db:56:3e:b4:40:a3:55:57:b2:c0:bd:7e:1c:
         ea:aa:43:88:11:e5:5e:67:f8:50:0a:27:30:c6:1b:9b:31:4a:
         9a:63:e5:12:1c:46:8d:ee:cb:c2:0e:48:27:cf:87:ca:b2:f3:
         90:8a:c5:d2:b1:cd:e9:5c:bf:b2:9d:d8:06:4b:21:9b:dd:92:
         76:41:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:16 2024 by rpki-client on console-fra.rpki-client.org