Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa
File:                     6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa (raw, json)
Hash identifier:          Z69Pp8qityNoY0IrVrEE9i+A/k0ni9zV80hczDn7k5I=
Subject key identifier:   5B:51:A6:0E:D8:0F:DB:C4:B9:49:BC:30:56:0F:88:62:B4:00:53:8C
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F43285847D99A098AF84D524698F2CBC0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     3842
IP address blocks:        23.226.224.0/21 maxlen: 21
                          107.161.16.0/22 maxlen: 24
                          107.161.24.0/22 maxlen: 22
                          107.191.104.0/22 maxlen: 22
                          107.191.116.0/22 maxlen: 22
                          167.88.112.0/22 maxlen: 22
                          167.88.124.0/23 maxlen: 23
                          168.235.112.0/24 maxlen: 24
                          2604:180:1::/48 maxlen: 48
                          2604:180:f2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:09:8a:f8:4d:52:46:98:f2:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=7dfe5516-496d-4dd3-90e9-5ef6dbcff873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:24:47:c7:07:19:d6:82:ca:8a:fc:77:24:
                    1a:55:d8:9d:8c:f7:8c:ee:fe:c2:ee:db:f0:72:fa:
                    e1:80:4a:84:81:35:80:c3:e3:40:4f:e1:23:6e:f7:
                    c4:a7:84:33:32:b3:1c:a3:80:4f:e9:8f:a6:29:da:
                    55:8c:cd:1e:99:5f:c4:e1:0c:1e:71:9f:ef:3f:95:
                    1e:e6:aa:df:43:ab:7e:c6:da:36:fc:dd:d3:06:f5:
                    53:ed:79:c4:6c:3c:94:64:a7:a2:2e:ef:74:a8:88:
                    ea:d9:f3:f5:91:ae:10:13:bf:a1:f0:7a:ad:d6:4d:
                    e2:8a:f4:e5:36:57:8f:43:23:af:37:5c:2e:b8:7e:
                    76:19:fb:f7:45:63:ad:48:02:0c:87:b5:42:58:cd:
                    d4:8e:c9:8f:fe:df:b0:02:f9:9b:dc:fd:1c:c8:87:
                    40:9c:66:1a:90:1d:29:7c:de:bb:63:9b:f2:4e:55:
                    4b:ab:40:7d:eb:71:b5:e3:a4:34:80:18:07:e6:12:
                    de:f2:40:16:c0:76:2e:50:e3:aa:c9:04:af:5f:d0:
                    8e:d6:16:39:d0:ff:e8:32:a9:17:2f:ae:d9:ad:67:
                    fc:8f:2a:6c:9a:4f:33:29:cd:7e:79:e5:e9:95:4d:
                    7b:63:9d:2f:40:7d:fc:d9:b6:53:4b:62:78:77:46:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:A6:0E:D8:0F:DB:C4:B9:49:BC:30:56:0F:88:62:B4:00:53:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.224.0/21
                  107.161.16.0/22
                  107.161.24.0/22
                  107.191.104.0/22
                  107.191.116.0/22
                  167.88.112.0/22
                  167.88.124.0/23
                  168.235.112.0/24
                IPv6:
                  2604:180:1::/48
                  2604:180:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:96:d1:55:58:c7:71:b1:fd:dc:bb:e9:8a:fb:6b:5f:0a:
         d3:76:6d:d4:92:b5:95:3b:a3:9c:6f:67:0f:9b:cc:d3:9e:82:
         c1:3f:e8:cb:43:92:56:0c:04:ec:48:0e:6f:4c:8b:52:c6:24:
         2d:b7:3b:16:ac:c2:1e:bd:41:cc:7f:08:fa:85:02:aa:77:7c:
         96:b0:8a:7c:78:d0:8a:ed:26:d9:72:9f:db:c2:2c:08:98:a3:
         90:6b:6c:d5:cb:1d:9c:37:50:a0:89:22:7a:04:66:4c:f5:4c:
         aa:a0:f5:b6:2a:c1:a8:a8:ba:74:d8:88:e2:e8:7f:a7:ce:84:
         6b:0b:55:63:8b:6b:73:48:1a:06:b8:bd:e7:3e:5f:18:7e:9b:
         61:27:58:c4:9a:09:a2:ad:b0:64:1c:40:83:f4:8c:bb:36:af:
         12:78:55:c9:0d:df:80:8a:c9:b7:37:b2:39:75:ba:b2:46:2a:
         8e:4a:d4:79:56:7c:a1:39:f9:45:38:77:ea:1a:4f:91:d2:7c:
         9a:fa:bd:be:b3:db:b9:b8:99:ef:cd:83:0e:e6:c6:c8:d7:41:
         e7:73:a1:c7:d2:a2:38:6a:15:94:c8:49:a9:2a:4c:16:4f:44:
         f2:47:4f:aa:47:f4:eb:c2:b2:99:32:c8:e5:ad:be:00:03:33:
         fc:43:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:41 2024 by rpki-client on console-ams.rpki-client.org