Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa
File:                     f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa (raw, json)
Hash identifier:          w0xFyDG1G+AnctHkVIB0n9iIdd63Q7RPK7FnEZdMp4k=
Subject key identifier:   F5:2C:30:3F:3B:BF:97:0A:9B:44:AD:09:69:17:C5:E5:2A:18:AF:D5
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F432858479AABEC7A4E0D641B0DD24980
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     23465
IP address blocks:        208.187.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ec:7a:4e:0d:64:1b:0d:d2:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=938f5db7-1464-48e4-8dc4-6972b007c470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:b7:34:1f:ed:c5:2c:22:6e:4a:70:1b:67:
                    f2:80:fd:25:a5:32:72:70:73:ed:01:a6:bb:b3:77:
                    e3:37:b3:40:c3:9c:d0:02:ce:d2:f1:10:0b:c3:58:
                    cd:c9:a8:b9:db:1a:fe:08:f2:71:d3:a6:71:94:ef:
                    42:59:c9:ab:bd:0c:1d:82:6c:53:d7:34:d0:c2:10:
                    39:f4:85:4c:f4:5f:fb:35:83:36:a3:48:ca:15:c9:
                    00:ca:6a:85:f5:29:ff:a4:e3:db:0d:75:cd:0b:9a:
                    2b:92:2a:b0:ff:2c:c0:3c:87:9b:85:7d:25:d0:d2:
                    00:83:4f:0d:56:a3:45:80:24:b8:a9:cf:e1:14:d5:
                    c0:cc:c3:14:c5:af:90:a0:0a:c6:1b:86:47:66:bf:
                    39:1e:17:4e:d9:74:3e:ec:e6:e7:6d:9b:da:d4:4c:
                    5b:e2:ff:4b:8b:54:85:17:21:3a:f4:47:a0:db:e2:
                    3c:68:a8:01:2a:d7:63:04:fb:0a:c1:80:3d:dc:01:
                    95:d5:9b:1b:80:a5:f8:22:14:7b:ee:3f:a7:ed:b5:
                    dd:5f:c3:b6:3a:ca:80:fb:ca:26:12:4e:e1:77:f9:
                    b3:0c:bb:86:b7:d2:86:ca:38:68:74:15:af:b4:36:
                    91:59:48:50:2f:bb:f1:4d:5d:b4:62:94:c4:7f:98:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:30:3F:3B:BF:97:0A:9B:44:AD:09:69:17:C5:E5:2A:18:AF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:16:ff:26:b9:57:ce:e3:1b:4f:ad:b4:ed:d7:fc:3e:a2:ac:
         78:81:4c:71:07:90:3e:89:a3:f3:40:85:3e:72:03:93:b9:d8:
         2e:64:eb:58:43:d2:19:06:e5:8a:5e:6f:1e:bc:50:a4:06:6b:
         d8:6b:a0:fb:8c:d9:50:8e:9f:5a:f5:b5:bb:3f:d9:cb:63:b9:
         62:f2:00:82:ae:a0:2d:9a:66:9f:3c:f7:b4:1b:fe:32:09:54:
         92:42:1d:6a:4c:1b:2b:05:da:51:f3:78:db:1e:76:fc:b5:3c:
         4f:6e:d1:e4:d1:2d:91:2d:91:6d:63:55:70:21:fa:71:78:66:
         0d:7b:1a:65:f0:ca:58:4e:54:06:ab:52:07:f8:cf:58:9e:98:
         59:45:0e:56:5e:2f:97:01:dd:90:1c:ae:a3:53:d9:86:a8:ee:
         0f:13:33:09:05:f6:32:15:8f:cc:8b:97:03:98:ad:b3:a8:b6:
         69:6b:e8:87:7b:3e:7c:18:2f:0d:67:0c:70:5a:cf:8e:ef:6a:
         51:84:af:c5:d9:3f:b4:76:dd:62:70:0e:ff:a2:a0:fa:bb:32:
         04:23:85:1c:e4:27:f2:1f:1c:3b:b2:35:71:cc:37:a6:ec:1a:
         77:c0:fb:b8:cc:68:5c:11:95:22:7d:8e:bd:b1:9c:de:b1:27:
         47:dc:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:06 2024 by rpki-client on console-ams.rpki-client.org