Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa
File:                     35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa (raw, json)
Hash identifier:          H9ByvKr1n5UVXPix+W+O4pXSGStmnxYxNaL2+uj84BQ=
Subject key identifier:   9A:F9:E6:F5:C5:A5:E6:81:E5:D2:34:43:6D:22:A8:9E:7A:3D:89:68
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F4328584731FB99C994453CF14B0D5A80
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     53316
IP address blocks:        173.213.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:99:c9:94:45:3c:f1:4b:0d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=fe8e7a06-0143-48fe-8e8b-c9cb865bc830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:1f:a3:6d:48:58:9d:27:71:fc:b7:73:c0:
                    13:e0:64:4f:b3:aa:55:96:bb:a5:b1:10:15:26:8d:
                    6d:52:c2:67:98:d8:e0:4f:c2:d8:38:d3:6d:2f:5e:
                    92:e1:be:3a:ea:72:16:a8:27:58:83:f3:1e:35:af:
                    03:0c:96:8f:24:33:25:39:1e:e8:f6:eb:53:74:2f:
                    b5:b8:c5:da:d6:4c:d6:a8:56:3e:46:5a:48:1d:d6:
                    f9:1f:c9:14:46:84:8d:4e:65:ab:46:59:29:9e:43:
                    14:e8:76:fe:bc:04:7b:ea:a4:27:78:b9:07:b4:9e:
                    62:7a:92:55:27:7c:39:09:22:94:7a:65:fa:2b:df:
                    47:3d:d9:29:8c:16:91:e9:ae:5f:0b:98:2d:c4:aa:
                    31:ad:2e:5a:3f:74:d9:fa:05:77:ea:ee:b3:5d:69:
                    ff:52:cb:1e:cb:e9:ec:dd:4a:64:49:fc:4e:25:b8:
                    19:c9:f8:cb:d4:6b:1b:a2:fa:de:bd:b0:75:6f:c1:
                    19:ef:ef:c9:69:3e:e0:3c:12:27:ff:2d:a8:b1:ce:
                    52:b9:b2:09:f8:2a:a1:c5:e1:c0:21:98:7d:41:65:
                    be:45:b7:82:27:bc:10:b2:22:6e:3d:12:c8:78:5b:
                    74:32:d5:6b:c0:5a:c9:1b:61:9f:35:b7:79:9a:ae:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:E6:F5:C5:A5:E6:81:E5:D2:34:43:6D:22:A8:9E:7A:3D:89:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:7b:c2:b4:db:dc:cd:58:8e:9b:a6:dc:ae:17:6a:e5:2d:
         ce:6e:4f:fa:67:ce:6a:22:a3:3f:c2:04:e3:65:15:1f:d6:82:
         b1:f7:4a:25:1a:92:1b:42:13:40:05:21:1e:58:74:93:b9:d0:
         11:7e:29:7a:cd:02:17:fd:a3:9e:d0:0e:a8:56:88:64:5d:b0:
         01:8d:fc:2c:69:ce:cb:a6:8c:9f:06:f3:25:46:d1:92:0a:21:
         38:6c:e2:34:45:2c:ba:e9:fe:f9:29:9e:4e:b8:96:c6:f6:f3:
         d6:b2:8c:4f:94:22:d2:ce:5f:60:5f:5b:fd:5e:55:94:e2:54:
         83:8f:1f:9e:0e:c0:e6:3d:2e:b5:a9:f5:c9:09:38:16:35:16:
         5f:a5:5b:e2:ee:fb:2a:7e:83:a7:18:3e:c3:df:89:3c:48:26:
         21:eb:a4:2a:82:8e:5c:01:1c:cf:f6:a3:e0:88:d4:5b:7d:08:
         bc:16:ed:79:8e:92:b7:61:e0:83:23:d8:c6:e1:ca:9c:1a:f8:
         9f:36:1a:89:cf:ed:d9:7c:94:54:c5:67:16:ca:45:59:b8:07:
         ab:01:f7:ab:c8:94:e0:02:7c:a6:9c:23:88:1e:6f:7e:d3:bc:
         bc:2a:a3:28:6c:ad:2b:53:e5:3e:27:03:07:27:b7:85:74:ba:
         e9:7e:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:32:03 2024 by rpki-client on console-fra.rpki-client.org