Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa
File:                     b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa (raw, json)
Hash identifier:          pKurjQZ3wKr3Efj/9eu0C5sw8drITmBDjEbfCp35QZQ=
Subject key identifier:   10:9D:46:67:5D:C0:A2:1B:27:99:2F:D4:B0:51:FC:FB:06:31:B2:4B
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F432858472C65D7917926EEE8C8AF2DC0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     0
IP address blocks:        206.53.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d7:91:79:26:ee:e8:c8:af:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=90f9efa8-7671-45e9-8bbf-b3f244b02c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:d3:34:e6:d9:6a:9b:89:4d:19:7d:ab:17:
                    a7:50:96:94:6b:09:75:bf:ff:21:f5:04:6b:07:26:
                    20:e0:09:4e:f2:0c:6c:d9:63:16:17:6f:ec:45:e3:
                    33:00:ab:7c:b1:26:d3:62:51:7c:fb:13:6e:39:22:
                    47:0d:25:a4:6b:c5:3b:f0:ff:a0:82:fa:7a:f8:6f:
                    60:a1:af:66:47:88:f5:ee:ea:83:cc:03:eb:c9:f6:
                    56:48:53:86:3c:de:01:40:dc:8e:2c:c0:5f:28:cb:
                    1d:7e:37:53:fb:2c:aa:97:c1:fb:6b:75:de:ab:24:
                    48:05:87:eb:75:89:14:13:22:5e:43:6f:cd:57:fe:
                    b0:98:ff:c6:ed:8b:e0:d0:05:09:28:09:b1:55:18:
                    96:ff:61:10:45:26:32:df:59:0d:fc:77:73:c2:7e:
                    7e:41:f0:27:27:95:7f:42:c2:bc:a2:97:bb:19:cc:
                    4b:e6:ae:0d:17:6d:31:0d:84:0d:31:02:2a:28:eb:
                    e4:35:8a:b2:67:e2:9b:cb:64:69:d3:be:db:4f:fa:
                    18:0d:66:36:42:96:73:86:c5:96:0c:e5:cb:16:5d:
                    0b:7f:1b:2c:d4:88:27:73:eb:9e:24:e7:5a:17:f2:
                    a6:c1:a3:81:9c:0c:36:4a:95:20:fe:e2:7d:d3:7a:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9D:46:67:5D:C0:A2:1B:27:99:2F:D4:B0:51:FC:FB:06:31:B2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:10:4d:89:94:cb:a7:b8:74:d9:39:7b:74:d5:f0:93:db:
         f9:13:c5:94:15:5c:b6:51:23:1d:6c:0a:ab:b2:4f:e4:a3:72:
         e2:e5:78:61:ba:bb:08:cb:3e:dd:3c:31:17:27:da:cf:01:25:
         91:f2:2b:43:35:96:91:d2:e4:ee:6c:a6:77:bf:9b:18:09:aa:
         1a:50:51:40:be:a0:96:52:d8:73:cb:98:e9:9b:1b:0f:ef:77:
         0e:29:e3:b1:ad:cf:1b:66:1d:16:d2:a7:21:0b:34:01:fb:83:
         66:5e:28:fa:bd:96:cd:a0:0b:7a:a3:03:4e:2f:d7:b5:5c:28:
         82:45:2d:42:25:b1:5c:73:14:e4:be:95:bb:27:cc:70:ac:ba:
         3b:55:a6:99:8c:62:19:89:31:0f:44:ed:1f:ce:10:2c:dc:e7:
         97:26:ae:d8:fb:1f:cb:4f:5f:40:34:bb:ce:cc:88:42:bc:15:
         af:08:38:f5:52:ee:26:93:a4:fe:5e:f3:f7:d6:02:32:33:7d:
         52:81:17:58:65:a4:4d:d4:aa:f4:6b:38:23:1f:8b:a5:fa:7a:
         54:34:da:ff:a7:b3:83:0f:d1:c9:3a:9e:a0:27:74:33:4a:65:
         9b:e3:62:ec:c8:d7:1b:d8:2f:86:a8:71:0e:9f:7d:5f:c1:8d:
         3f:7f:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:27:58 2024 by rpki-client on console-fra.rpki-client.org