Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8fa03152-503a-36a1-81a4-32d586b9c0d9.roa
File:                     8fa03152-503a-36a1-81a4-32d586b9c0d9.roa (raw, json)
Hash identifier:          nVOhETrekh3JP1JxdXW0aCXZqN5cTF/aj1CCB8TypdA=
Subject key identifier:   87:84:CB:CC:FB:4B:D1:44:CB:8F:68:A6:BD:21:88:AE:7C:7B:87:42
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E3D78ACB8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8fa03152-503a-36a1-81a4-32d586b9c0d9.roa
Signing time:             Tue 05 Nov 2019 21:29:09 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        206.197.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:3d:78:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=364d52bd-bab5-4a46-bf81-902f9a93d00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:82:59:d5:6c:e1:a2:9a:bd:5a:10:3c:39:
                    b6:d9:c7:94:fd:17:bc:f8:3f:f3:7b:5d:ca:b2:de:
                    6c:ab:d5:3d:3f:32:50:f0:97:80:ee:6e:b6:6b:46:
                    b9:16:6d:d9:82:af:bc:00:53:b4:59:6e:33:e3:84:
                    5a:ab:5b:2b:fb:7d:93:d7:d1:c1:24:de:df:cf:0a:
                    b7:b6:77:ef:32:45:64:50:5b:90:90:79:47:87:f0:
                    8c:bc:b0:98:4c:85:bc:f5:75:c4:4d:25:4f:9f:44:
                    59:0e:17:7b:cd:5e:ce:7f:eb:b7:86:99:2b:68:83:
                    b8:b0:07:a6:3f:8e:06:33:14:ec:fc:8a:02:34:a1:
                    a4:d1:0c:94:1b:9b:e6:7d:84:cc:c0:8c:e0:0c:77:
                    80:08:8c:83:96:b7:d4:1a:d1:54:35:e4:17:1b:fd:
                    ec:c9:18:9e:78:27:20:10:2c:92:94:cd:73:dd:92:
                    5c:cf:8d:7c:b6:97:ce:8a:04:98:15:5b:fd:59:f9:
                    30:91:ad:2a:18:58:9e:42:96:f0:ee:49:0e:c9:1e:
                    74:81:2a:9e:34:2a:43:77:a3:bc:a0:a4:27:4c:4c:
                    47:03:9a:d3:e5:15:5b:9f:73:fc:46:6d:fc:54:b9:
                    a8:0c:3d:6e:26:eb:46:76:e2:ec:bc:a6:16:00:a1:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:CB:CC:FB:4B:D1:44:CB:8F:68:A6:BD:21:88:AE:7C:7B:87:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8fa03152-503a-36a1-81a4-32d586b9c0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:b3:a1:5a:d5:8c:97:9b:40:92:ca:2a:f2:e4:3d:8f:e0:
         d7:5b:35:93:9b:87:02:22:16:ca:6d:6f:87:0e:3d:79:11:24:
         2d:c5:b5:f2:9d:7f:fb:10:ec:7a:d7:64:88:23:cc:41:2b:69:
         54:39:7d:0d:38:5d:ce:ab:21:87:0b:8e:8d:d5:2a:62:dc:94:
         b3:5f:58:4e:38:16:ec:56:4a:26:1d:6c:4e:40:02:e1:8b:0e:
         bc:2f:d7:aa:fe:0d:9c:fd:61:d2:03:e9:bb:79:f9:1a:c6:c1:
         3d:22:30:f5:11:9c:06:81:be:6e:7c:de:27:b8:a2:c8:8a:e5:
         8c:7c:32:02:b0:d1:22:35:ee:c9:12:2a:e8:71:4f:68:f7:3d:
         76:d2:a4:36:b4:25:37:60:a2:95:5f:94:c9:25:d6:76:11:33:
         8e:49:ce:1d:78:d4:68:19:cc:41:c2:b0:6d:b9:1c:ec:27:2c:
         bc:d3:31:68:ce:8c:27:3a:c7:67:aa:39:fb:34:7b:be:c3:d2:
         95:b4:7e:0a:e6:0a:a0:ef:dd:46:3c:ca:1d:01:22:6c:18:4b:
         be:c6:4d:61:90:f1:df:a5:83:7f:43:64:a0:fe:95:19:12:3d:
         e6:0d:d1:a5:a2:b4:b3:fd:d3:e0:22:ee:6f:86:6c:96:5b:3a:
         56:20:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:15 2024 by rpki-client on console-ams.rpki-client.org