Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
File:                     d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa (raw, json)
Hash identifier:          V7bjvncxllEZ/kh4pxvWQPuMIH9FPShQwo1nLhhzoX8=
Subject key identifier:   4F:3B:56:99:48:60:6C:62:98:30:6D:0D:69:37:72:E2:A2:1B:A0:C5
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F432858475EA620FD0B2CFDA2CDEB0380
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     27742
IP address blocks:        208.96.128.0/21 maxlen: 24
                          208.96.136.0/22 maxlen: 24
                          209.124.100.0/23 maxlen: 24
                          209.124.105.0/24 maxlen: 24
                          209.124.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:20:fd:0b:2c:fd:a2:cd:eb:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=194da3f6-5b58-48f8-b692-d94ac473e397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:7b:4d:37:da:ef:cc:42:3c:b1:76:50:d3:
                    38:d2:2a:93:af:81:b6:3a:d0:15:b1:e4:7c:1e:22:
                    7e:d8:d3:50:6c:e0:31:f7:4d:d6:26:f2:b9:11:53:
                    dd:aa:43:66:cb:ff:09:93:f4:59:e9:b1:f6:fd:cf:
                    9e:42:f2:1d:cf:33:ec:cc:7c:5e:4c:b0:7f:e1:5f:
                    58:92:b5:93:50:4d:14:f1:05:3b:3f:83:b0:b3:83:
                    b6:cd:41:5e:6d:e6:31:5c:7e:bf:41:80:56:9d:56:
                    0a:ee:7e:6a:8a:72:6b:52:f3:1c:92:ef:96:be:19:
                    cc:11:76:4f:85:20:c7:6f:f6:39:9d:25:30:4b:b9:
                    1b:86:a4:92:38:3b:47:11:aa:4d:6a:53:f7:62:f9:
                    11:0b:6b:1d:db:45:3e:32:76:2f:18:54:18:ed:0c:
                    23:02:cc:73:77:86:a2:ed:79:d3:18:6e:57:bc:71:
                    f5:58:2b:2c:87:be:b0:59:13:10:2c:47:10:9b:16:
                    ae:38:65:a9:2a:b3:b1:5b:7f:0f:7e:8a:43:d5:a2:
                    b5:ec:7b:44:f6:4a:ee:d0:c8:2e:ee:75:81:6e:20:
                    dc:e9:0f:9d:35:d7:be:69:c5:75:e9:18:f0:8c:f2:
                    b8:b9:94:4c:82:4c:1c:11:e7:4b:f5:12:f5:fa:a8:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3B:56:99:48:60:6C:62:98:30:6D:0D:69:37:72:E2:A2:1B:A0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.128.0-208.96.139.255
                  209.124.100.0/23
                  209.124.105.0-209.124.107.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:be:13:e2:08:ce:68:03:74:ba:44:20:f3:4d:87:ff:d1:
         cb:5c:bb:2a:13:ec:c5:0d:c9:8e:86:34:dc:1d:2e:9f:f3:97:
         5f:68:53:38:2e:fd:03:53:b4:04:00:fd:ef:6e:86:d9:ec:11:
         52:36:84:3a:ea:63:1f:26:28:7a:53:c5:7a:56:6a:a5:e0:f1:
         c4:d6:8c:34:b0:b4:80:a5:43:25:c4:5f:f0:43:a3:7e:78:30:
         2e:d3:8f:75:7a:57:06:86:ed:fc:d0:83:d1:b8:81:39:09:c2:
         2f:0a:26:fb:cc:72:3e:de:4f:e8:eb:cc:1c:63:97:ed:df:ea:
         40:bd:35:c9:77:ce:c0:ea:ad:0e:7e:ed:3b:4d:63:73:d0:97:
         8a:eb:d5:0d:b4:d5:f6:5a:1e:8d:e0:55:c5:bb:c6:26:43:02:
         62:11:31:d0:39:5b:8b:e4:93:79:03:86:02:7b:6b:57:23:c0:
         58:5b:01:a9:b4:6c:9a:29:5e:db:01:23:e8:ee:dd:fc:2b:dd:
         e6:64:ef:d5:b7:50:4b:0b:1b:8b:fb:06:56:a9:0c:56:44:04:
         8c:39:fb:d1:f9:eb:07:70:9d:a8:a4:4c:8e:0e:4e:1c:5c:8b:
         1e:35:36:cf:b5:75:14:cb:df:c3:57:c1:e7:64:d0:f5:49:bc:
         1e:97:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:51 2024 by rpki-client on console-ams.rpki-client.org