Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa
File:                     c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa (raw, json)
Hash identifier:          s6h6mMyLFueYJY+aMoiOzO5wsuYW1+EU/JWD8l6AVhk=
Subject key identifier:   84:FE:B8:D1:81:41:16:C8:70:15:44:18:7C:16:3B:15:37:6F:5B:57
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285847E78F6302056D8BFC17BF5500
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     3561
IP address blocks:        208.159.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:63:02:05:6d:8b:fc:17:bf:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=2a727103-cf2c-4eb9-b7dd-2e5b016e6fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:10:42:df:7e:46:77:18:88:af:5d:53:e8:
                    ec:38:c9:e7:4c:94:72:8d:f3:2d:aa:6c:24:58:53:
                    a2:4c:0f:e4:34:54:b4:54:2f:99:21:63:3b:4c:ff:
                    77:e8:ec:61:a1:ea:95:d7:7c:ef:31:2f:88:cb:d2:
                    96:52:30:4e:57:b4:29:8e:b3:8e:86:77:ec:1f:d1:
                    d0:f4:98:81:ab:25:f4:52:08:9b:0a:17:0d:42:31:
                    97:59:2b:96:64:0c:e3:a6:10:a1:62:30:ca:5c:9e:
                    fa:e4:ca:51:ea:49:e3:44:d0:27:62:f7:79:5f:32:
                    aa:58:43:1c:bb:12:66:05:04:e0:5d:05:a1:d7:ce:
                    83:1b:ca:50:56:8c:1e:9f:8d:43:fb:cc:8f:dd:63:
                    13:25:eb:20:b7:b6:8c:bd:a8:65:65:e3:ec:e7:6d:
                    f2:29:a3:06:1a:e5:79:03:b3:a0:d9:b9:75:8b:72:
                    91:a9:d1:01:55:90:8c:59:71:54:89:0e:97:e4:47:
                    4b:3f:cd:68:80:b6:f1:80:25:5d:ae:ae:7b:c3:93:
                    a4:57:01:a5:de:4d:f4:18:ac:a8:ea:c6:dd:48:e1:
                    9e:76:7d:66:e7:f0:58:0a:b4:45:fe:4e:72:55:5d:
                    aa:f6:09:fc:91:9f:48:48:08:ca:e3:c0:fd:ac:01:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:B8:D1:81:41:16:C8:70:15:44:18:7C:16:3B:15:37:6F:5B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.159.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:e8:df:37:b9:a8:a7:28:1d:d7:2c:09:fb:24:99:c8:56:
         b8:17:3b:24:67:4e:d3:a6:ea:d4:2a:33:18:85:2d:b3:04:3c:
         d7:ae:13:5d:97:ee:74:e8:06:a6:1a:08:be:cb:69:46:16:47:
         d9:c4:0f:42:78:a4:e4:4c:96:ba:f3:fa:4a:26:e0:f5:35:b2:
         54:cf:c1:a1:76:90:39:bf:63:34:f2:75:ac:a7:f2:b6:ae:09:
         94:c2:f0:33:ca:9a:73:99:74:59:7f:0f:68:aa:f6:6b:29:3e:
         d3:57:9b:b8:58:e0:c9:ff:8f:83:e3:f6:1a:4e:0e:5f:26:38:
         a6:c7:81:88:b6:cf:c4:7b:0f:89:87:fc:41:72:df:21:41:c2:
         cf:13:0f:37:42:77:53:7e:4d:b1:c5:cf:ce:20:9e:75:04:2f:
         b5:0d:78:d1:9b:79:23:e0:82:1b:57:99:94:c3:43:01:7c:29:
         26:cb:ed:b1:f7:06:74:0c:0b:a6:df:ad:35:4f:a4:60:37:73:
         2d:d8:0b:cb:f2:77:05:c2:4c:a0:32:1f:55:12:70:01:38:46:
         d8:68:cb:30:57:0f:02:a4:ed:63:a5:d4:e2:6b:24:10:cd:e0:
         b7:f5:dd:e2:a6:8a:11:f7:70:12:0a:11:56:49:d0:e4:e6:04:
         b8:1d:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:34 2024 by rpki-client on console-fra.rpki-client.org