Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fc08fcaf-d19d-37e7-82de-f2021984f2a7.roa
File:                     fc08fcaf-d19d-37e7-82de-f2021984f2a7.roa (raw, json)
Hash identifier:          /ZvFf0ZRe5AZ7bUjvnzZxgUyP/EdbFFszSlxbobfwgo=
Subject key identifier:   48:41:3A:B6:D8:9B:F0:B8:5D:66:ED:E5:80:43:A1:96:39:49:1E:AD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DFB3D687F
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fc08fcaf-d19d-37e7-82de-f2021984f2a7.roa
Signing time:             Thu 24 Oct 2019 00:49:28 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     10708
IP address blocks:        207.67.130.0/24 maxlen: 24
                          207.67.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:fb:3d:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=03797754-7efa-4fee-b687-2e98435705a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:3c:2d:d2:c7:38:94:51:2f:fa:ff:24:a3:
                    f2:77:a7:7f:af:76:b2:57:d7:c3:ee:8d:3c:0d:41:
                    26:c9:8d:4d:98:a6:10:93:eb:c5:c3:ae:3b:0a:2b:
                    f8:a9:36:f7:d4:c2:33:36:2f:f1:a4:fd:0d:18:58:
                    48:9a:09:34:7b:07:58:db:ae:65:bd:25:0d:c3:a8:
                    1c:a9:71:02:b6:ba:ed:ba:7d:f3:ea:d5:12:16:00:
                    a4:67:ce:02:58:bc:7e:15:b8:4a:77:be:3f:83:23:
                    e9:28:ca:ae:7a:05:eb:b4:57:18:1b:0e:9e:d7:7b:
                    03:cd:b6:37:2c:fe:64:63:ff:e2:72:f5:c3:a0:61:
                    85:05:66:2f:35:42:b1:f9:55:28:a3:bf:81:72:2a:
                    45:8c:9f:17:b5:44:c0:cd:32:9f:9f:63:82:91:60:
                    ae:c7:ad:41:67:aa:e2:f8:eb:e1:b8:0e:0f:4c:2b:
                    7b:c2:6e:6b:82:e0:b1:f3:ea:a0:25:1d:bc:81:e5:
                    9a:8d:d4:0c:b2:b6:5c:fd:64:9f:9f:42:40:e8:9c:
                    89:bb:53:7b:5c:f7:1c:af:9a:64:27:65:ca:62:25:
                    de:c4:d6:44:10:db:14:c6:b6:20:18:0a:03:10:c1:
                    f5:4c:0e:70:f9:89:be:61:98:f0:e6:e1:01:35:5c:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:3A:B6:D8:9B:F0:B8:5D:66:ED:E5:80:43:A1:96:39:49:1E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fc08fcaf-d19d-37e7-82de-f2021984f2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.67.130.0/24
                  207.67.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:72:3c:69:be:a3:14:f4:3b:ad:76:fa:4a:eb:14:2b:c2:07:
         70:e7:35:d4:bf:21:ae:40:54:86:10:c0:a9:88:90:5e:06:a5:
         96:6c:be:42:5c:26:54:93:99:98:20:89:86:09:12:1e:a2:8e:
         66:ea:ba:f8:ff:90:20:5e:01:3e:4e:90:c3:1a:12:a8:44:95:
         20:a7:76:db:d7:32:dd:67:26:5e:55:fb:5f:b1:9c:f4:a4:b3:
         5a:1b:af:2c:c1:64:1f:1c:7e:dc:b4:11:94:80:75:d3:9f:f6:
         7a:48:06:58:49:d1:6f:64:e7:ae:83:1a:8e:25:ba:4b:26:e3:
         43:74:94:1d:a1:0d:08:79:20:f0:1a:8d:23:59:82:9f:e8:ad:
         03:70:e1:01:f3:5c:41:0f:c7:a6:df:ea:e8:5e:20:82:ac:ba:
         ba:9e:e8:f1:fa:da:c2:56:0d:a7:57:95:a4:ff:9a:0f:17:f0:
         86:33:41:c5:28:38:57:df:f8:4d:3b:27:90:09:31:d1:98:2b:
         d4:28:c3:f9:2c:7b:d6:61:b4:5d:f1:7a:da:c4:c8:64:b1:9f:
         0d:e1:d5:ba:e0:1a:e9:fb:32:37:32:9c:1f:92:16:de:66:fd:
         ab:c6:1a:53:55:68:4f:e8:2c:ca:3f:e7:65:df:e8:c6:27:ef:
         ab:05:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:10 2024 by rpki-client on console-fra.rpki-client.org