Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/592f3e86-2245-326a-9218-4c6aca68364d.roa
File:                     592f3e86-2245-326a-9218-4c6aca68364d.roa (raw, json)
Hash identifier:          NLPxh11VT5NFGt/xbMX3z6cZTJ1OuzM/N3PSJ3fo2/E=
Subject key identifier:   75:70:08:1F:C7:0E:10:50:12:66:88:FC:29:C9:A5:DF:CA:F1:A3:23
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584726D08412C2BA5E8C9BC0C240
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/592f3e86-2245-326a-9218-4c6aca68364d.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        206.225.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:84:12:c2:ba:5e:8c:9b:c0:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=e97c2077-227b-41ca-81e7-31140c72c184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:9f:f1:38:44:9c:80:50:f5:01:1d:5b:c4:
                    92:6f:e0:50:e3:d2:36:bc:db:62:b4:07:df:8f:32:
                    8c:60:04:ea:2b:23:3b:be:1d:18:f8:7f:d1:50:37:
                    b9:ce:5a:ac:fb:0a:52:e3:5f:c6:5c:36:68:98:1e:
                    d7:8c:24:77:25:f0:5e:ed:d9:8e:c6:3f:31:74:56:
                    20:65:db:92:8c:12:b3:86:27:18:12:1b:82:61:e6:
                    d8:c1:eb:be:94:eb:95:c3:49:69:11:cb:fb:07:7b:
                    02:31:2f:c0:d3:5f:34:49:d1:1f:88:61:8f:fd:1c:
                    0c:eb:55:29:57:01:01:19:26:11:d7:64:77:c3:34:
                    14:86:e6:e0:76:bd:71:13:f2:be:7f:05:f7:4d:8c:
                    0f:af:ba:fb:ad:39:af:1c:bf:5a:64:4f:21:4e:a2:
                    6d:d7:d4:96:24:7d:31:6a:c2:64:ab:9a:37:a0:78:
                    a0:68:91:20:13:04:10:d4:92:e7:32:44:da:8c:ab:
                    a5:85:5a:13:5c:47:4b:82:34:94:d5:94:38:c9:23:
                    e6:d8:8f:8d:8f:77:0f:f6:83:36:f2:3a:9b:c8:dd:
                    8c:45:39:85:48:a4:cf:a1:af:18:bf:84:5d:fb:61:
                    df:17:13:6a:4a:65:b6:11:cb:85:9a:94:8f:73:a0:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:70:08:1F:C7:0E:10:50:12:66:88:FC:29:C9:A5:DF:CA:F1:A3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/592f3e86-2245-326a-9218-4c6aca68364d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:82:ee:b9:d4:6d:25:6b:8e:27:31:c4:c6:a5:84:52:ca:
         64:d5:21:fc:08:04:b3:b4:19:64:5b:32:a8:ea:f8:46:71:84:
         54:d1:3a:26:30:ca:44:3e:16:49:af:9e:7a:91:18:0e:98:2e:
         ff:76:4b:e9:68:d7:89:57:6e:14:d3:e0:df:69:58:4e:d6:11:
         0e:a2:3b:70:d8:02:71:22:76:23:8d:1f:3d:06:dc:e2:cb:84:
         1a:08:59:7c:a5:73:19:34:06:4d:e8:ff:4e:fc:29:6b:53:0b:
         52:9e:76:de:bf:37:35:d0:ec:b7:39:a2:90:8e:5c:29:a6:5b:
         1d:0b:6e:91:c3:ff:63:aa:b8:de:b0:f3:77:d7:63:04:24:d9:
         0b:da:25:65:a1:0f:7b:a0:8d:ee:ed:73:82:c3:54:e6:89:1d:
         ce:5a:df:15:85:9d:cf:27:3b:17:a8:9e:31:ce:6e:a7:51:8b:
         f4:32:48:d4:1c:f9:60:ca:de:ad:94:81:bd:f7:9a:09:e3:50:
         c7:18:2e:5c:39:a2:9c:f3:6c:3a:cc:1b:79:ad:3a:f6:79:fa:
         57:cf:f8:2a:c0:4e:c8:86:90:8f:df:31:c1:53:a6:e9:93:ea:
         af:93:3b:30:a5:f2:57:76:39:4f:19:e7:49:52:18:d1:a5:77:
         23:f2:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:36 2024 by rpki-client on console-fra.rpki-client.org