Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa
File:                     2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa (raw, json)
Hash identifier:          3gOwi3jqbHf6/TINSRVAU5PxqP1QRT/pin7KTybJIJg=
Subject key identifier:   35:9E:D9:FE:EC:C3:4F:39:35:D6:74:D8:A5:CD:E3:2E:FE:6D:71:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858474F4B7E98F99A03BB86DA1400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     7342
IP address blocks:        209.131.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7e:98:f9:9a:03:bb:86:da:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=6d783b51-81e6-4dce-b843-790327af89e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:9b:06:de:95:75:16:e5:56:6e:1c:a3:a0:
                    51:c7:17:65:93:5d:1c:e7:cb:eb:23:1f:8a:31:99:
                    d4:e3:d8:bd:d6:ef:d9:f8:fd:cd:1d:d5:26:da:bf:
                    8b:e7:93:8c:cd:84:14:44:71:8d:d4:a3:d7:e4:35:
                    52:8a:0f:96:88:0c:ad:0e:54:6d:41:ed:fd:b9:c1:
                    9e:be:72:66:32:04:78:b2:9f:cd:ea:64:0b:16:ef:
                    fb:d1:3e:24:45:57:d6:63:f6:4d:12:f4:d9:fc:ff:
                    b8:e8:b3:3e:5a:25:c7:fc:69:36:4a:3a:80:21:57:
                    2e:f5:2e:2e:bd:07:3f:2f:1f:3e:4c:fa:03:d4:a7:
                    fd:ad:80:5c:65:41:b3:0a:13:e1:d1:d4:a9:1a:b6:
                    97:9f:28:d2:83:26:ec:5b:ed:7b:52:08:f3:80:bb:
                    0a:47:84:c6:6f:4d:97:7b:7e:ef:18:76:b3:d5:43:
                    0c:a6:12:58:03:47:ba:6e:89:a4:fd:eb:9e:a7:70:
                    64:4e:e0:d6:08:4e:4b:ad:4f:0b:43:19:99:b1:82:
                    4e:30:2e:28:83:5f:04:87:43:73:ef:ad:92:cc:73:
                    09:19:ce:e6:32:e4:1f:65:0a:80:c1:3f:31:10:3c:
                    4a:b1:01:09:25:77:2a:d0:d6:e8:15:0b:dd:3d:24:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:D9:FE:EC:C3:4F:39:35:D6:74:D8:A5:CD:E3:2E:FE:6D:71:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:76:36:d5:8c:9d:de:0a:84:74:2d:8c:7b:da:9f:c5:84:
         f6:c9:f9:6a:87:54:91:cf:b1:c4:43:6a:59:29:c0:30:0f:38:
         26:fd:47:5a:8d:4d:23:7b:b5:43:01:29:01:e9:b2:95:94:76:
         04:ba:36:06:9e:a5:51:f5:5b:c3:40:71:c3:12:4a:96:bd:6e:
         ce:10:64:56:c1:ae:54:2b:4c:58:a1:8e:44:f2:e4:74:85:14:
         f0:40:91:41:30:58:36:83:2f:e9:fb:7e:bd:91:13:d0:eb:18:
         4d:5c:bd:f7:99:3b:c7:07:f6:4f:30:6c:8d:75:18:bc:35:1e:
         0f:7c:65:c4:c6:df:0f:24:50:e5:84:76:55:fe:cb:c4:4e:f8:
         cc:2f:e4:f7:85:44:44:10:9a:86:d1:f5:81:2e:14:19:52:43:
         71:f0:97:de:ab:3c:e4:8b:66:27:71:89:3e:b3:23:9c:6f:6b:
         05:24:15:e0:46:f2:10:d6:e1:15:98:29:95:65:5f:79:ec:f5:
         5e:b0:42:b4:2f:b3:b9:a1:8e:8f:1d:c2:36:43:80:b2:d4:b2:
         9c:5b:71:ba:9b:d2:6c:74:cd:af:0a:8b:96:60:63:54:ca:c6:
         bb:0a:fe:54:d5:1a:e1:d7:ab:a4:5d:30:5d:57:0c:91:0c:d1:
         80:c4:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:26 2024 by rpki-client on console-fra.rpki-client.org