Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa
File:                     450b8e4c-d668-3931-b207-a712d28e3174.roa (raw, json)
Hash identifier:          6PItiSUzuLoQ6XO+LLE0de7Dp5Nc7Ec4e754SvU2YgE=
Subject key identifier:   02:5D:08:84:B9:97:F5:06:36:7C:99:B1:B8:5C:79:34:39:9E:8B:12
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285847686B905C032070608C5FCCC0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     22140
IP address blocks:        206.29.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:90:5c:03:20:70:60:8c:5f:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=9d7f95ab-1438-4ea6-838e-d2117284cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:ba:b0:04:ef:89:a9:c2:24:70:2a:6e:1e:
                    ba:c7:d2:a0:01:65:29:1e:5a:a6:ec:38:ae:43:9c:
                    56:f4:8e:ec:4c:0b:03:86:2f:60:e2:87:38:70:84:
                    0b:a3:77:25:3e:71:c9:b0:ff:77:e0:6f:74:03:0a:
                    b5:7c:59:2d:16:0b:c3:4c:a0:39:6d:90:2d:23:8b:
                    36:bc:67:fe:1d:ed:89:97:a3:ec:ae:dc:ee:31:ba:
                    3a:99:ce:20:ff:0b:d6:34:ab:22:c2:82:fb:67:46:
                    5c:cb:16:b2:14:3b:c5:0d:ab:16:fa:83:28:01:a7:
                    26:e5:2e:cd:83:ed:48:35:23:8f:ef:fb:ec:82:6a:
                    d9:b1:8d:62:07:cd:34:ee:11:70:49:d7:7a:84:63:
                    d3:44:46:3f:b5:ec:3d:6a:bc:27:74:91:8d:2b:44:
                    3f:23:55:01:e9:a3:b7:85:18:5a:c7:86:a6:42:73:
                    75:52:b0:6a:ef:19:ca:17:1d:8f:64:c2:33:81:0a:
                    18:ae:4f:7b:84:f2:5b:55:2c:ed:59:12:fd:38:7b:
                    b1:f2:46:06:1c:3b:81:3f:02:1b:b3:6e:93:0a:28:
                    93:46:20:98:9a:70:8a:71:58:45:50:30:bb:48:e0:
                    42:7a:ef:86:83:12:d3:8f:20:9f:bb:0d:e5:42:f7:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:08:84:B9:97:F5:06:36:7C:99:B1:B8:5C:79:34:39:9E:8B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.29.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:36:6b:4d:7f:8b:bf:a6:74:e9:d1:30:26:2a:18:e5:21:
         50:8e:dd:ed:0c:7b:61:6e:14:00:15:8e:4c:48:b8:00:7a:0b:
         34:ed:86:16:c7:f5:d5:86:be:87:af:6a:3f:da:04:72:8c:12:
         e9:9f:d0:3b:d7:22:60:a5:6e:18:9f:83:a1:fe:6f:78:e5:06:
         e5:95:9c:d8:a1:7c:6d:fe:5d:d5:ff:a9:cc:21:2d:f3:24:33:
         56:fb:74:ff:a8:8a:95:9f:29:b5:a9:08:2a:eb:e0:40:f0:e9:
         27:52:ae:55:06:b5:09:09:b8:92:7b:7f:b0:00:1f:96:8c:7c:
         95:80:8d:0d:65:46:70:ff:29:85:e0:ba:ba:d7:7c:1e:54:c5:
         cf:5a:7b:74:73:7b:ab:e7:9e:35:2c:88:cf:de:bc:db:1d:9e:
         27:b7:dc:43:9e:a2:bc:51:59:22:3f:e4:c2:98:69:bf:75:fe:
         08:d6:c8:24:76:49:a1:f0:cc:56:4f:a8:ab:2b:2c:be:14:8f:
         57:1d:5b:2f:95:7f:33:ea:b5:75:c6:de:71:b8:41:34:88:21:
         40:fa:1a:a3:2b:65:af:cb:f7:b5:26:05:c2:a4:5c:c9:5a:49:
         9c:e6:32:e8:fe:e7:b5:7c:a2:da:7b:66:c5:21:fa:6c:02:c5:
         04:10:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:37 2024 by rpki-client on console-ams.rpki-client.org