Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
File:                     9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa (raw, json)
Hash identifier:          Rwsyf++9RaZbIHV8ZSx/Ga4u/uCH1dRxV9+hiNkW+Cs=
Subject key identifier:   F6:D3:CF:37:72:42:3F:C4:37:59:CE:F5:F8:C2:3C:A8:CA:12:3E:40
Certificate issuer:       /CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
Certificate serial:       010D0C9F432858480EA51027AEAEF914EF976D34
Authority key identifier: 6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     396982
IP address blocks:        216.59.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:10:27:ae:ae:f9:14:ef:97:6d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=540feeef-cb89-4794-9355-56c0e5a753aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:c5:22:d7:ea:8c:72:b6:02:f5:40:45:c1:
                    03:96:68:82:3b:26:0d:5a:55:ce:12:a2:23:c5:83:
                    3d:27:ec:07:bb:a3:8a:bf:e3:31:86:3d:ca:3e:5b:
                    6f:1c:ec:af:d2:8b:3d:ef:4a:d5:22:80:99:d7:70:
                    09:d4:bd:d4:5a:61:27:de:61:ca:4c:43:22:76:74:
                    85:91:8d:e8:06:74:ff:b5:d0:7c:12:e5:82:33:4d:
                    64:06:8a:eb:1c:7c:24:16:8f:db:f4:b3:83:bf:5e:
                    f0:62:d6:97:84:9a:bc:f2:6f:63:ae:ae:4a:5c:bc:
                    d2:02:30:b4:1e:9e:86:fb:ef:58:71:ed:43:20:3e:
                    46:ca:fa:a7:3d:55:08:cf:a4:df:5f:e7:e3:40:20:
                    2d:7c:c6:8e:3e:b6:74:09:c6:59:f1:31:25:b8:7d:
                    93:25:05:d9:6a:fd:89:89:70:03:e9:f6:3c:e7:f5:
                    78:d3:98:60:f5:a3:9e:09:b0:8f:dc:cf:b3:6a:dc:
                    e0:fa:f4:e6:d1:28:e4:e9:e4:0e:3e:a2:af:48:6a:
                    43:4d:5c:fd:dc:b5:b2:2a:aa:77:09:55:07:54:99:
                    82:5f:41:a2:22:dd:4a:40:e5:57:ed:13:9c:fb:c8:
                    ee:25:88:2b:3a:b4:8f:a5:a7:ad:c9:2d:4c:70:75:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:CF:37:72:42:3F:C4:37:59:CE:F5:F8:C2:3C:A8:CA:12:3E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:a5:79:d0:6b:ef:ec:89:66:aa:24:15:5f:5d:db:43:97:
         0c:f6:fe:1e:7a:9c:85:ab:57:07:4d:d5:3d:6b:ac:ad:80:9d:
         5a:81:ad:40:2f:68:6b:a7:31:68:00:94:64:dd:68:5c:e1:f2:
         97:28:d0:15:77:c8:01:bf:43:5c:d4:b0:25:64:c3:3d:9a:90:
         12:a5:0b:f0:39:6e:4f:98:06:1f:fd:43:30:01:fd:4b:f3:c5:
         3e:b4:17:42:50:78:0e:4d:9e:03:f6:a9:0e:e2:5f:3b:6a:65:
         28:b2:b4:34:d4:64:24:e9:b2:02:20:ca:75:6a:44:0e:c0:da:
         54:a0:6d:f6:b0:7a:5e:db:e9:1b:1e:fc:d5:2f:dd:43:77:7a:
         a7:c6:c8:a2:4c:a1:95:c5:f0:ac:4b:53:bd:e4:84:6a:18:00:
         ee:34:a7:fa:2c:7e:a2:28:00:73:e4:81:2c:87:b4:bf:e5:08:
         df:cd:c5:39:a3:61:6d:1a:5c:3c:5f:12:a4:11:9b:e1:97:00:
         f1:f4:dd:70:bd:83:d7:ec:04:1b:fb:96:2b:e9:be:aa:e3:6d:
         f6:25:13:1e:d7:73:30:01:79:2c:c5:eb:8b:83:22:d7:d8:68:
         9f:e0:4a:de:2b:a5:ee:a6:f3:6f:ec:6a:16:a0:58:b9:0e:fc:
         5c:bc:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:20 2025 by rpki-client