Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa
File:                     639b27f4-2787-3a34-bea2-9dc5e60792e1.roa (raw, json)
Hash identifier:          F+NwvFrrHPVX64Tjj+pO3SONJRTCW+EOvwFwOBC6Mqc=
Subject key identifier:   A6:CD:5C:16:CE:39:2B:6B:AF:50:DB:3B:D6:8D:24:8A:80:75:4F:BA
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858471775BD3597A2D53B14A0FF00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     3561
IP address blocks:        207.124.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:bd:35:97:a2:d5:3b:14:a0:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=583fd01e-0151-4cbb-acd7-13cd1a3c99c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:97:c9:4d:38:a3:e3:e9:14:7e:61:bf:66:
                    6d:7b:72:11:13:65:7e:38:88:47:7a:d9:c6:ad:a2:
                    99:5d:80:2d:df:6d:36:15:b3:ee:79:5c:13:d5:3f:
                    ac:02:15:af:72:9f:55:04:3e:f5:cf:10:33:60:e9:
                    08:1e:44:4f:f1:3e:2a:b5:90:b7:4e:7a:66:27:a0:
                    38:0f:d4:f7:ff:f5:ac:81:d0:1d:63:5a:13:6a:c9:
                    3c:92:2d:c5:64:7b:94:5e:9d:33:44:94:5e:de:fc:
                    e7:5f:61:1e:8f:44:6a:5f:f5:bb:04:9c:34:07:6c:
                    2b:a9:6e:ea:62:5b:06:b1:86:a6:18:60:11:c2:3c:
                    62:c0:09:42:12:f4:28:af:04:4f:d8:6c:28:7b:e5:
                    0e:8b:70:0f:11:7b:3f:ef:8e:87:6c:92:7f:f1:94:
                    42:9f:88:9c:bf:f9:70:8a:f6:c1:8e:ad:c7:bf:78:
                    bb:6f:40:2e:25:e6:48:3a:1c:a0:dd:fd:35:76:15:
                    61:2b:17:ac:bf:5e:57:33:c5:cd:90:84:96:ee:88:
                    20:2d:85:fb:fa:8e:4f:c7:c1:31:2b:c6:09:20:c5:
                    85:55:63:b6:2d:aa:9b:4d:5d:3c:00:6d:02:45:1e:
                    1f:e1:df:67:86:e2:0a:d1:e7:e9:9e:12:c2:3e:dd:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:5C:16:CE:39:2B:6B:AF:50:DB:3B:D6:8D:24:8A:80:75:4F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.124.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:c6:66:08:d1:37:44:40:13:cc:e1:06:83:3d:a6:7c:7f:
         ac:22:7c:d1:2f:cc:0f:45:60:4e:cb:df:c5:66:c9:cc:0a:4e:
         a5:6b:a7:15:de:f7:43:1b:54:b5:e8:2e:95:1d:36:0e:b0:31:
         b3:2c:d9:1f:38:fc:48:ec:93:93:2b:3d:c8:57:0c:08:e1:cd:
         6d:b5:e8:1d:ea:71:d3:b1:b0:49:cb:fc:2e:39:e2:00:0d:72:
         12:87:d2:2f:69:54:32:2a:46:39:88:46:fb:3e:30:82:b1:96:
         70:cd:4d:3e:78:0d:98:06:f1:2a:88:0b:a5:19:65:1c:f7:7f:
         42:bb:22:f8:7d:7c:3c:2c:c6:fc:88:92:4f:7d:8d:00:1a:27:
         ea:96:cb:79:1d:5e:52:0c:bd:0c:d3:ef:3f:c2:89:4c:31:c3:
         6b:a4:f4:7e:30:50:9d:8b:bd:76:6b:37:f1:34:12:90:2e:ae:
         23:4c:6f:06:b4:d8:5f:4c:fc:47:c3:c6:52:32:06:03:a3:a5:
         73:e1:12:40:9f:84:72:2d:42:b3:73:f8:0a:39:9d:df:46:73:
         c0:81:55:74:22:3f:6b:0a:b9:b3:02:71:fc:ac:e3:f6:9e:0a:
         be:bb:32:51:87:41:8d:9b:4e:18:05:22:29:99:a3:ca:02:27:
         fc:73:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org