Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
File:                     a818896b-7daf-37f6-b3fb-21abf321d2b7.roa (raw, json)
Hash identifier:          uoOn4+IoNkfds0CA53uN5PXWVfVrXQljjB9Ycntpcmc=
Subject key identifier:   98:77:99:43:85:C9:7F:19:DA:8D:D7:2D:4F:E2:AE:E6:3F:90:5F:28
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F43285847CD09F27A303FF7068334D080
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     55079
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f2:7a:30:3f:f7:06:83:34:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=a90f54fe-38ea-487b-ae49-c72c23c3a47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:1e:47:e0:e1:d6:18:ca:69:d5:1d:63:1a:
                    87:46:17:55:ed:4c:66:54:64:b1:89:58:e1:a0:32:
                    a5:03:a7:85:71:db:7f:99:e0:a2:12:d6:b1:71:f9:
                    c3:47:07:f8:1c:87:6f:cf:4e:bd:00:6a:dd:8d:60:
                    99:ed:e6:de:6a:14:81:0e:be:12:fb:bd:2c:a4:66:
                    f1:cf:30:da:50:e4:5e:7f:4f:91:df:1d:72:65:4f:
                    ca:60:e1:e4:35:9a:cc:3b:e1:32:0d:19:66:53:6a:
                    0f:74:4d:87:a3:82:8c:ff:8d:a3:28:78:20:cf:f6:
                    dd:66:fb:55:65:c9:4f:90:bc:aa:d1:c5:82:3b:da:
                    c0:a3:76:38:44:63:dd:45:a2:74:81:17:fa:48:22:
                    ae:cc:f2:ae:ef:d0:e8:30:9a:76:f5:d3:f9:72:6b:
                    b2:3c:1d:92:bb:40:f3:0b:a0:68:0f:b4:cf:61:82:
                    5c:17:04:6d:dd:c0:2a:a3:fc:95:1c:0d:3d:cc:cb:
                    80:0a:16:3f:c4:53:05:38:c6:c7:f1:40:84:1e:4c:
                    ab:3d:fa:b0:89:a3:10:f9:86:2a:e2:f0:a6:b5:d1:
                    27:33:0c:a3:6d:04:20:18:1b:12:44:2e:59:6d:a1:
                    ea:47:84:d3:88:f6:d2:2d:31:ed:10:c5:c2:2c:04:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:77:99:43:85:C9:7F:19:DA:8D:D7:2D:4F:E2:AE:E6:3F:90:5F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:15:30:2e:b9:e6:44:a9:4b:16:22:c7:50:d9:b7:49:f6:
         d8:6f:a5:5f:36:49:45:11:d7:c8:d3:05:cd:11:8d:01:f4:8f:
         6f:0a:d1:4f:5a:d2:ea:f6:a7:73:4d:f3:ff:b3:e6:d6:24:bc:
         a9:ad:d6:d5:eb:cf:fb:d5:2d:9c:ea:14:4c:93:53:dd:f2:fd:
         0f:f5:19:6b:a1:6c:23:ff:e4:ab:cc:a0:09:03:83:e9:36:aa:
         90:f1:d3:12:3c:fc:29:52:24:8b:6e:bb:bc:a2:de:a7:61:cf:
         7f:4f:59:bb:2b:8d:5b:78:d9:7d:8d:2c:b9:ce:9b:e4:f5:74:
         a5:cc:68:90:80:12:c1:e8:e6:c9:5c:10:f1:50:d9:54:a8:52:
         35:91:d6:c3:5e:84:f4:95:ca:79:bc:19:85:60:b7:18:c8:c1:
         4f:46:d4:e7:43:b9:73:37:cb:d9:73:d4:90:4c:59:68:9e:3c:
         62:97:e1:76:25:63:53:05:2e:36:55:c9:87:4d:2f:46:bb:ce:
         a6:70:a8:5a:61:95:a9:89:df:7b:ad:32:09:44:a2:29:4e:ac:
         cd:86:cd:57:80:fe:73:93:5b:93:53:97:00:68:d5:ee:f3:4c:
         6d:0a:58:11:2a:11:9b:e9:5e:7f:d9:67:c3:00:9b:2c:b2:83:
         d6:b4:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:49 2024 by rpki-client on console-fra.rpki-client.org