Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa
File:                     8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa (raw, json)
Hash identifier:          SKN3yB1ifi6bVlXBsT29j/RWjluyjHNh7rC9gbiGEjs=
Subject key identifier:   BE:53:0D:9F:BB:1E:57:3A:32:6A:F7:42:3F:3B:E4:D5:18:5E:96:9C
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285847B10161C54685AFFD67C21500
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     6621
IP address blocks:        72.169.32.0/19 maxlen: 19
                          72.169.64.0/22 maxlen: 22
                          72.169.68.0/23 maxlen: 23
                          72.169.70.0/24 maxlen: 24
                          72.169.72.0/24 maxlen: 24
                          72.169.74.0/23 maxlen: 23
                          72.169.76.0/22 maxlen: 22
                          72.169.80.0/22 maxlen: 22
                          72.169.81.0/24 maxlen: 24
                          72.169.82.0/23 maxlen: 23
                          72.169.84.0/22 maxlen: 22
                          72.169.88.0/22 maxlen: 22
                          72.169.92.0/22 maxlen: 22
                          72.169.96.0/22 maxlen: 22
                          72.169.100.0/22 maxlen: 22
                          72.169.104.0/22 maxlen: 22
                          72.169.108.0/22 maxlen: 22
                          72.169.112.0/20 maxlen: 20
                          72.169.192.0/20 maxlen: 20
                          72.169.208.0/22 maxlen: 22
                          72.169.212.0/23 maxlen: 23
                          72.169.214.0/24 maxlen: 24
                          72.169.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:61:c5:46:85:af:fd:67:c2:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=9ea57430-9477-4c42-ba7c-6de434e20ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:a3:d5:20:13:2f:67:a9:10:fe:0e:c4:d7:
                    44:55:97:17:12:96:db:2b:05:a2:60:aa:c5:71:b6:
                    6e:f3:cc:e6:80:1e:1f:d4:16:0f:1b:75:85:b8:a4:
                    10:37:07:42:13:04:64:e3:71:b3:16:b1:29:6f:d4:
                    74:83:aa:d8:c7:e4:28:48:7a:c9:28:7f:23:70:3b:
                    11:08:62:b6:3e:5e:c6:0e:dd:48:b8:45:5a:7f:d6:
                    17:9b:35:96:d1:e7:dc:c5:32:17:98:15:e6:b9:e2:
                    41:3d:6b:3f:b7:f3:62:d4:8b:5d:5d:5b:9e:99:75:
                    95:9d:c2:6a:a8:3b:35:32:4f:0a:b8:91:ae:38:f8:
                    79:28:d9:04:64:64:17:bc:c2:12:82:f6:b9:dc:9b:
                    34:e4:75:99:7c:74:93:cc:9f:a5:60:e4:14:bc:f4:
                    29:59:af:6f:25:bb:6c:24:25:40:66:7e:eb:98:d7:
                    6f:7a:06:df:96:a9:fa:6e:8e:79:aa:22:a7:cd:03:
                    bc:db:c6:17:8d:84:d3:6c:81:39:93:18:14:db:69:
                    19:77:db:12:e8:60:33:3e:22:ac:6f:40:a0:64:36:
                    04:40:c4:c8:b6:b4:e5:75:e0:be:d7:3b:a7:5d:79:
                    8f:01:d7:64:3e:d7:11:a4:a5:f6:7e:41:ea:d4:fe:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:53:0D:9F:BB:1E:57:3A:32:6A:F7:42:3F:3B:E4:D5:18:5E:96:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.169.32.0-72.169.70.255
                  72.169.72.0/24
                  72.169.74.0-72.169.127.255
                  72.169.192.0-72.169.214.255
                  72.169.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:d7:75:a2:cc:64:eb:0e:e8:2d:86:9d:73:43:88:f5:bf:
         c0:fe:ed:e5:be:95:da:f5:5f:0e:f0:7c:d2:08:f2:dd:24:17:
         98:60:7b:19:79:ad:43:9b:99:bb:34:09:92:c2:d5:d2:6c:ff:
         b9:60:85:37:ab:dd:61:5c:2b:bd:d6:19:69:35:68:86:fd:fe:
         8e:f2:43:42:b3:3d:1d:be:f9:75:ad:3b:e3:ea:66:46:65:d7:
         9e:01:11:08:ac:56:c6:ee:ee:d5:47:71:b3:2a:84:40:0d:5a:
         72:f4:54:63:98:f4:ec:2f:5c:8f:55:77:90:50:9c:60:f8:42:
         a9:3f:96:c2:5d:fe:92:79:ba:3d:62:61:9c:e1:37:76:e5:4d:
         60:81:8f:13:56:94:9c:0a:6f:77:6e:48:b3:54:e7:30:71:55:
         eb:dc:c1:11:9f:7e:71:48:2d:7d:74:0d:e7:7a:70:0f:bd:08:
         99:74:56:03:1d:1f:9f:70:43:1d:5d:03:16:00:24:de:cf:b6:
         b4:8a:09:ce:07:03:96:d6:10:d4:ae:3f:a7:2b:93:3b:4e:13:
         f3:e8:db:bc:91:b9:d8:9c:bf:44:0c:c4:4a:71:a4:77:db:96:
         49:b6:d1:5d:f0:e4:22:16:68:9b:f6:8c:b1:47:1f:56:1a:17:
         62:b8:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org