Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa
File:                     df5c18b1-7d04-39af-97a4-da803d7e85ff.roa (raw, json)
Hash identifier:          YfoZSD5xQEtq5MROTMSalsXXsxCwRZ6XsfQuiO3adPM=
Subject key identifier:   BE:B4:99:3E:12:DE:61:47:19:2D:75:AB:0B:AD:38:0D:A1:64:97:86
Certificate issuer:       /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial:       010D0C9F43285847ACD13D91686948402EB4D940
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     40264
IP address blocks:        199.15.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3d:91:68:69:48:40:2e:b4:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=549bbb6e-1a2d-4c71-b302-2be62e70b18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:f8:51:6d:d7:4a:99:d6:ea:4c:96:47:8d:
                    34:eb:23:a4:1f:a4:a4:01:6f:41:ac:5e:49:69:73:
                    2b:e8:e0:96:3a:9d:66:1a:51:51:02:55:71:c7:27:
                    3b:82:a4:a7:13:b2:d7:d9:3f:a6:d1:7e:b4:9c:bd:
                    52:4b:a0:d7:a3:92:ea:90:2a:ed:57:f5:ef:3a:85:
                    e8:96:c8:59:49:c8:4f:2d:7e:99:48:09:11:fe:ff:
                    30:78:95:ac:c1:30:b1:b2:74:e5:d4:07:42:ee:60:
                    99:f8:70:4c:70:4f:9a:46:85:36:88:49:cb:65:2b:
                    d3:11:b8:f6:b7:7c:74:22:5a:a9:38:28:37:5d:0a:
                    f7:4e:00:f8:17:ea:75:c9:13:36:32:4f:fa:3d:27:
                    96:3b:a5:05:d0:ac:76:dd:32:d3:05:f8:d0:30:e9:
                    c1:da:ee:16:cd:0d:2c:78:8e:88:b2:14:29:31:e3:
                    4d:bf:63:ac:02:34:fd:98:3a:22:78:61:5e:05:fe:
                    3a:fb:2c:e5:41:26:0b:9c:66:2a:cf:6f:a9:f3:ee:
                    48:06:fc:69:96:04:c5:2d:d0:d7:16:90:8d:22:a3:
                    16:85:74:3b:29:d3:12:d2:4c:bc:28:7e:e5:dc:c0:
                    22:90:e0:ed:a4:bc:27:d0:8e:8b:af:f3:8d:c4:00:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B4:99:3E:12:DE:61:47:19:2D:75:AB:0B:AD:38:0D:A1:64:97:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:db:1e:a9:89:9e:7e:02:e3:ca:1f:71:47:8a:63:c8:b9:
         65:dd:39:59:99:8e:bb:21:85:fb:af:bc:34:2d:c2:4c:7f:a2:
         e6:c7:40:88:2b:22:44:33:6c:5b:1e:e1:ff:31:1e:3c:84:b3:
         9f:a6:08:78:fc:78:83:91:33:96:b6:ec:7f:71:bb:35:7b:bb:
         e7:0f:e7:cd:53:96:5c:a8:bd:99:22:43:83:2c:bd:10:7c:41:
         aa:a4:8b:f5:6b:95:ac:b0:e3:35:a0:79:cd:2e:82:06:e6:57:
         3e:fa:36:dd:ca:93:a1:ea:8f:2e:27:0d:4e:8f:9f:06:c3:ed:
         8e:f5:4d:71:13:f4:38:c4:7e:dd:1b:93:cc:bb:a8:93:1e:ec:
         8a:9c:f3:d3:31:d1:4b:c1:73:91:41:ff:a2:de:e5:38:0f:9f:
         3c:5c:df:c9:b4:df:bd:08:ea:e3:74:30:a4:1c:0e:74:3b:a0:
         81:70:0f:b3:a8:4b:ce:9a:b7:35:96:42:84:cf:97:9c:f3:cb:
         ee:14:cd:33:03:70:7d:71:45:9e:54:da:3b:81:8c:4c:65:5d:
         52:86:06:65:2f:1a:f9:5d:da:d1:20:ab:43:4e:2a:17:46:ea:
         c6:a0:f0:b7:ae:e9:6e:ae:a4:9c:5b:bf:e0:e6:da:df:b8:bf:
         b4:14:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org