Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/393047a1-4692-3ee6-a0eb-88f59fd13731.roa
File:                     393047a1-4692-3ee6-a0eb-88f59fd13731.roa (raw, json)
Hash identifier:          QExvddD0CcqauUlw1Ojyh8Aqsa8JyVGAJbZGt3uNiCk=
Subject key identifier:   57:96:35:B9:4C:20:C5:36:06:CC:14:E9:17:C4:4F:AD:7B:66:9F:35
Certificate issuer:       /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial:       010D0C9F432858477EC10F708E2C394776D48280
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/393047a1-4692-3ee6-a0eb-88f59fd13731.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     36671
IP address blocks:        216.180.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0f:70:8e:2c:39:47:76:d4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=6940e456-0954-487c-9c4e-2242f20536c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:7a:57:ba:bb:19:01:f8:e1:2b:f8:00:10:
                    d4:b5:17:e8:83:3e:a0:3b:33:e1:06:d4:79:81:7e:
                    40:e8:36:ae:6c:d8:30:2c:d9:b4:08:f8:25:29:cd:
                    83:f2:27:d1:ab:49:c1:de:18:e7:07:8c:5d:da:87:
                    d5:b8:8a:9f:ac:76:3c:61:70:df:de:21:c1:a5:cc:
                    09:94:19:b0:90:76:8d:11:04:7a:d9:82:18:72:21:
                    fb:69:c4:17:9e:73:33:65:41:05:ea:3a:8b:8f:0b:
                    8b:d4:c5:f3:77:1e:c3:be:61:37:8d:b0:f8:c0:5f:
                    1b:6e:75:96:7d:2b:bd:ff:dc:42:a7:b7:33:78:61:
                    81:fe:17:f5:82:1d:23:cc:9c:75:c7:9e:11:d7:50:
                    b6:14:85:1f:71:f8:2b:e1:ad:91:cb:ff:d0:28:3e:
                    01:1b:57:bd:af:50:29:be:6e:f3:09:a3:38:57:8d:
                    3e:bc:69:55:ad:54:fc:a7:74:9f:8e:6f:21:c3:06:
                    88:87:a3:9b:be:8d:00:62:89:ec:56:fb:40:c8:c0:
                    26:74:6a:05:55:78:f9:b6:bc:c9:17:f4:55:f2:1c:
                    f0:fd:3c:e5:fa:51:85:3c:ee:da:9a:0e:64:5d:e2:
                    41:84:f2:3f:23:1d:7c:b7:20:d3:db:6a:c0:6e:01:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:35:B9:4C:20:C5:36:06:CC:14:E9:17:C4:4F:AD:7B:66:9F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/393047a1-4692-3ee6-a0eb-88f59fd13731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:e4:81:e1:51:b0:80:59:85:18:5f:b0:ea:7b:fe:5b:33:
         b3:56:ee:75:94:9f:c9:14:78:91:0b:d5:58:be:ed:66:1b:6e:
         8c:27:22:5f:7e:83:36:6a:d6:6e:03:57:c3:25:e0:a0:7c:5e:
         ff:47:d8:12:93:83:ac:1e:91:c0:ab:ec:d0:59:dd:24:8f:23:
         7c:96:22:9d:0b:79:a5:21:1c:2e:0a:0b:c5:ea:6d:99:91:13:
         77:4d:d8:d3:ff:bb:76:be:5d:38:22:6e:df:de:64:f8:33:96:
         c4:16:35:9d:89:94:60:b0:2c:6c:1b:ab:fe:af:ec:71:ff:bf:
         cd:84:01:fa:32:e9:ce:f7:bd:15:8f:01:04:07:46:b2:82:88:
         ec:8c:b9:69:85:5b:5c:6b:96:b2:ac:fa:99:57:c8:c2:8b:ba:
         0c:2a:8f:cc:cc:02:1d:29:05:fa:89:7a:c0:97:a1:c8:d6:53:
         27:07:dc:47:9c:d0:a0:34:86:83:46:15:3c:d4:c3:98:d0:52:
         ef:94:7e:77:89:dc:a2:76:33:cc:39:22:11:34:0c:2b:b5:e9:
         49:6c:11:71:00:f0:03:0f:6d:b4:20:00:b3:53:d9:65:0e:b3:
         88:fa:76:fb:27:b4:8d:63:4b:91:49:07:81:67:5b:95:f5:bf:
         7f:4a:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org