Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
File:                     3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa (raw, json)
Hash identifier:          tEuO+tphTEWTQfox4Iiipc5XeEj7KaIjmb9wJPlCzao=
Subject key identifier:   86:DD:21:9E:EF:42:29:8B:B9:49:A0:C9:47:9F:24:19:FF:32:A0:6A
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F432858477CAD70599BC17959BDBC5D80
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
Signing time:             Wed 09 Oct 2024 19:09:39 +0000
ROA not before:           Wed 09 Oct 2024 19:09:39 +0000
ROA not after:            Tue 07 Jan 2025 20:09:39 +0000
asID:                     26914
IP address blocks:        166.93.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:ad:70:59:9b:c1:79:59:bd:bc:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Oct  9 19:09:39 2024 GMT
            Not After : Jan  7 20:09:39 2025 GMT
        Subject: CN=a7fdd992-09bd-4742-b2a2-7b8aca49c026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:db:f6:82:f3:57:7d:79:99:8a:6b:f0:d2:
                    8a:32:93:86:69:5e:46:6d:da:1c:54:ec:1b:b0:4c:
                    47:0a:ea:4c:bb:75:97:7a:23:56:e7:84:64:95:6b:
                    c9:fa:dd:2e:98:23:2f:df:33:a4:78:24:44:7e:f5:
                    8b:6b:69:50:be:22:5a:a2:5e:22:9c:76:8d:4b:a5:
                    da:83:f1:8d:d2:e6:fd:18:be:67:04:ac:c0:ce:32:
                    22:66:bb:3f:4b:f1:43:b2:d6:f9:ed:5c:41:7a:e9:
                    13:c1:f1:a1:c5:b0:81:eb:53:af:6d:f6:81:45:2e:
                    de:a3:5a:57:4b:05:63:d6:b2:87:fc:2f:bf:fe:eb:
                    40:00:99:99:b2:5d:23:c8:1f:c3:47:93:73:5b:09:
                    89:6d:33:41:99:81:7f:d7:a7:b3:eb:51:a9:42:39:
                    f5:03:31:c3:09:7f:25:d0:85:7a:71:06:4c:3a:49:
                    1e:1d:13:f0:cd:db:92:d3:ae:fa:b6:52:19:7a:dd:
                    ec:43:d6:5d:32:d1:8a:9e:6c:b5:f0:4e:da:6b:55:
                    29:6e:29:d9:ff:0f:ae:c0:d2:69:81:5e:4f:14:8f:
                    f0:be:26:31:b6:61:b3:de:21:5c:46:a5:04:f9:f4:
                    14:63:a6:41:ae:9a:59:e0:aa:a8:69:91:1e:50:30:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:21:9E:EF:42:29:8B:B9:49:A0:C9:47:9F:24:19:FF:32:A0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:80:54:50:f2:cc:35:fb:d8:52:5c:3a:5c:30:53:dc:19:
         d2:0a:2b:e5:c8:de:f0:10:4a:ca:7f:4c:c1:ed:c2:f1:ca:07:
         25:59:65:f2:12:54:4d:38:27:64:1f:d1:ad:cb:5f:65:98:6d:
         ea:6f:85:f3:0b:29:6f:5b:f0:0b:2b:9f:f6:74:6d:f5:ed:da:
         a7:4c:b9:f5:4e:60:af:b0:03:15:cc:84:7b:c6:77:1c:71:b2:
         b1:46:16:78:cd:d8:0c:2a:e1:ca:7e:4c:0b:bf:e4:84:d6:20:
         6e:5e:34:3f:2a:54:96:65:b9:c9:87:a5:5a:eb:56:df:fa:fb:
         28:74:c4:fe:33:18:36:3f:5d:8b:81:34:ef:9e:c8:81:1b:a3:
         cd:e9:94:bf:37:a0:ef:c0:99:ce:30:c6:f2:02:e1:6c:41:ad:
         a2:df:bb:a3:5a:54:09:aa:3a:74:0b:87:dc:44:7b:13:8b:e5:
         ad:24:f7:7a:ca:d0:1a:fd:e9:e5:ba:eb:f3:0e:4a:15:e2:0f:
         c8:b2:86:a0:a0:b2:e7:14:e9:51:f8:e7:a7:47:2d:bd:01:36:
         1d:62:95:26:69:26:83:78:46:be:7d:f3:8a:42:25:bf:e9:b6:
         a4:e1:fa:43:c0:7f:e5:63:34:5a:41:f9:56:93:c7:b7:f3:c4:
         2c:fd:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:46 2024 by rpki-client on console-fra.rpki-client.org