Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File:                     ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier:          FDiwN8y1c4RL6+yZQOmNn9UIoKR4pXCO+/HXUQ+3R3g=
Subject key identifier:   17:42:E4:36:96:EF:F5:E4:CD:2F:82:75:0D:A9:73:EB:0E:ED:75:4A
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285847B266A051EF08D15BD6044C67
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     397518
IP address blocks:        208.109.143.0/24 maxlen: 24
                          208.109.145.0/24 maxlen: 24
                          2603:4:1017::/64 maxlen: 64
                          2603:4:1018::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:a0:51:ef:08:d1:5b:d6:04:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=d3a1f709-6eda-4e51-9254-af4fd8de1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:94:c3:4d:51:ca:61:79:0e:a9:e8:d3:25:
                    2f:d4:a4:e9:11:19:8f:97:ff:93:f8:c8:90:b3:17:
                    06:c7:58:93:32:e8:8d:9c:8a:46:02:a9:b3:e3:4c:
                    d0:25:4f:0e:cc:17:88:85:e9:f4:2d:1f:b9:66:06:
                    1b:36:aa:b5:e7:da:ad:02:6f:bb:f5:2d:a9:65:aa:
                    7d:6b:89:24:86:42:6e:08:d5:ce:40:da:b1:9d:23:
                    49:84:5e:94:22:9d:5a:27:c8:2c:70:c5:ac:ba:6c:
                    7d:03:20:11:60:dc:50:34:b6:57:22:78:5a:e2:05:
                    93:82:23:b8:43:80:90:67:7e:8b:ce:be:41:09:f2:
                    f4:ac:4e:2f:9d:a4:0a:d3:f5:d6:c0:15:22:a3:cd:
                    d1:5c:92:da:51:16:1a:73:71:af:ce:7f:9a:72:a6:
                    c2:7a:99:08:fe:8f:c6:b4:00:75:6a:13:80:5f:8f:
                    eb:02:4e:98:35:46:69:01:be:84:9f:fc:c5:c8:03:
                    1b:45:87:ab:47:29:32:4f:f8:e3:5b:b7:fe:c9:d8:
                    88:8e:56:10:ff:d8:50:64:d8:7b:dc:97:70:1f:f1:
                    27:2d:2a:0c:8d:c2:0c:67:82:f7:9e:64:58:ee:6f:
                    da:ee:28:d1:d4:42:da:df:d1:2c:9d:ab:da:11:0b:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:E4:36:96:EF:F5:E4:CD:2F:82:75:0D:A9:73:EB:0E:ED:75:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.143.0/24
                  208.109.145.0/24
                IPv6:
                  2603:4:1017::/64
                  2603:4:1018::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:8a:05:fa:40:63:ff:bd:0e:a4:cf:f1:c1:6d:0a:ce:0f:
         e8:7c:0f:2f:ba:e0:3a:94:7d:77:f9:81:b1:8d:e5:1b:ec:30:
         74:36:35:75:4e:b8:3a:a4:6d:e2:ab:ab:b3:1b:31:6a:66:3e:
         a6:e5:56:74:00:1a:1d:9d:be:bc:33:34:84:f3:27:3d:41:c0:
         67:81:77:e9:7b:fd:ff:9d:36:74:30:f8:48:ae:57:81:51:5d:
         fb:b8:22:8f:e2:d5:39:d8:cf:01:a9:a4:14:32:6a:ff:6e:b2:
         0f:e3:d0:36:79:9c:47:ba:ff:1b:e7:44:8e:e2:f2:cc:d2:a3:
         83:d1:4c:3c:e3:23:04:62:9e:27:f4:69:43:39:ef:cf:bb:b2:
         91:91:2c:e1:0e:4d:0e:7a:a6:50:19:0f:36:34:1d:b6:53:96:
         b4:a0:67:0c:29:ea:64:07:d4:33:8b:a8:6a:3c:25:36:2a:f6:
         ea:83:b9:79:89:0b:fd:07:11:13:c5:07:66:73:3b:e4:4e:19:
         8a:a5:e3:f2:59:7a:5a:d4:0d:94:91:31:87:2c:7c:f9:e1:c0:
         e2:85:d3:28:dd:de:cc:42:c1:81:da:fe:11:85:08:41:9f:05:
         f5:86:35:ce:55:7d:92:96:70:2e:b9:53:65:27:c7:73:e6:cd:
         2b:df:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:04 2024 by rpki-client on console-ams.rpki-client.org