Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa
File:                     3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa (raw, json)
Hash identifier:          ZpGTDOFGaMCRycTPO68LwMcPrTmbEMAmr24c1HRPPE4=
Subject key identifier:   ED:33:BF:4A:42:67:03:B0:F8:93:0D:BE:B6:C7:BF:CC:12:51:31:1E
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F432858475910B4E99CE3FCA6F5761800
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     53264
IP address blocks:        216.38.228.0/24 maxlen: 24
                          216.38.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b4:e9:9c:e3:fc:a6:f5:76:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=09e1f2a3-9d57-4396-9c5b-b88e343a7e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:5f:05:af:68:ed:f2:27:47:e2:d7:fb:f6:
                    a5:4a:72:31:fe:f0:51:28:03:f5:1a:5c:d7:88:0c:
                    4f:54:1f:47:8e:6c:b0:a2:1a:26:97:04:1f:60:9d:
                    36:b7:44:fa:d9:8c:27:22:23:47:6e:17:46:25:03:
                    83:89:08:d9:2e:fd:ec:50:d3:cf:a6:ca:ff:6f:fc:
                    ca:d3:ea:9b:96:a5:a8:ab:b9:c4:42:52:19:c0:0c:
                    31:85:4a:4b:e2:28:13:12:f9:42:97:0a:0f:ae:26:
                    d6:a7:92:f2:2e:24:91:06:f8:ab:de:3b:bb:60:7e:
                    5a:69:d6:04:6d:18:ed:fc:55:df:57:bf:c8:e8:54:
                    1b:80:4b:c5:9a:ab:de:d3:42:9c:95:77:8a:cd:64:
                    81:36:79:d5:02:80:b3:af:45:13:33:15:a7:5b:5d:
                    fa:3f:7d:56:5c:40:39:29:2b:ec:53:77:ca:2a:59:
                    da:ba:f6:40:62:0a:8a:33:12:87:60:91:5d:85:ec:
                    24:a3:4a:a8:57:b1:44:75:1e:21:bd:ba:39:4d:e1:
                    26:8e:5a:93:61:a5:45:5d:99:a7:21:c3:d7:78:28:
                    1a:71:a1:b4:f7:cf:00:a1:59:92:8d:16:14:fe:e8:
                    f5:55:b2:26:3f:61:ec:98:ad:e5:5d:dd:f2:c7:0e:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:BF:4A:42:67:03:B0:F8:93:0D:BE:B6:C7:BF:CC:12:51:31:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:24:da:2f:6d:46:e4:b2:3a:fd:f7:cf:03:e7:a1:5c:72:87:
         38:f2:c1:53:6e:a9:3b:c0:fb:a8:fc:eb:03:8b:07:8c:19:a6:
         c4:b3:2d:dd:1b:70:c5:c8:d7:d4:e5:c4:08:0c:3b:e1:a7:33:
         e8:7e:b6:57:07:41:83:78:cc:5a:b0:61:24:20:bc:d3:c7:57:
         d3:9c:4f:5e:0c:e9:aa:5a:ea:e3:10:26:65:cc:fb:07:a8:7b:
         c9:8e:77:be:75:df:02:99:a0:2a:af:ba:82:5a:b6:d3:82:34:
         20:09:6f:df:86:8e:71:09:54:d9:10:08:9a:78:1c:8a:a1:94:
         6b:f7:44:6e:03:99:2d:3e:22:ed:0e:1b:e9:36:64:1f:dc:49:
         63:47:2b:d9:a1:8e:8c:a5:84:98:eb:5c:28:0d:bf:f0:85:5d:
         0e:89:fb:f7:fe:d7:66:9d:98:e8:25:c2:91:7d:0e:d1:96:9e:
         6f:a5:f7:75:30:9e:be:48:df:ff:3f:77:33:f4:51:18:9e:1e:
         29:3f:61:f0:1a:c2:70:31:59:f0:dc:18:c0:85:9a:a6:b6:a2:
         46:7d:58:59:01:f9:3f:e3:6b:79:67:c2:7a:51:f9:3a:b6:f7:
         10:63:9c:39:42:10:b8:1d:3e:6c:d2:bd:d1:4e:03:fa:e5:66:
         d6:7b:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:21 2024 by rpki-client on console-ams.rpki-client.org