Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa
File:                     fa664348-c6f8-3082-b883-eeddf7c01424.roa (raw, json)
Hash identifier:          802bgCjFavOs7S9oJ4n45YBYVn10WLbJxnM5dCQ95tg=
Subject key identifier:   1A:1E:AE:B5:6C:E7:9F:FE:2E:19:5B:C5:85:16:62:AE:76:E0:44:46
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584726D07DBDE7964276FD186D80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     6461
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7d:bd:e7:96:42:76:fd:18:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=4270e6df-2897-498e-8bed-3987f7ca93b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:f1:b1:0e:92:13:df:25:3f:d8:65:ed:56:
                    73:a6:f5:48:c9:b5:d9:d6:80:b3:a0:50:8c:71:9f:
                    28:a7:d0:63:31:16:cf:1b:58:49:29:98:e4:71:2a:
                    73:48:9f:bd:58:df:0a:b3:31:e3:e8:58:45:93:ef:
                    52:a4:ac:9b:fd:d2:b6:df:ee:68:af:e0:b2:5f:34:
                    5a:7c:7f:27:1f:94:38:17:08:45:63:cb:de:a8:c3:
                    86:37:42:c3:9d:0e:bc:42:f6:48:2c:00:bb:3b:49:
                    35:cb:02:59:75:f0:4d:56:43:41:8c:7b:a7:6c:55:
                    55:9e:fc:b8:6e:0a:c1:cb:bb:81:61:7f:e6:30:d5:
                    d1:48:12:d5:a0:74:8a:2a:ad:7e:98:21:0e:a4:e6:
                    ef:8e:98:56:40:b9:5a:39:7a:12:7c:09:b3:69:bd:
                    5c:5e:79:44:f9:2c:1e:9f:ec:51:72:77:5f:2f:60:
                    3e:ef:16:fd:a4:18:e6:23:0a:ff:70:97:5c:e0:05:
                    82:28:2d:1c:6a:05:a5:df:69:06:71:03:6b:e8:3e:
                    3f:e8:ec:84:fb:32:13:79:a8:bf:c7:dd:fc:8e:c2:
                    29:08:df:54:fd:73:89:5a:11:1b:64:72:89:cf:10:
                    c8:db:f3:11:87:57:de:4c:b2:21:7f:f0:87:6d:03:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:AE:B5:6C:E7:9F:FE:2E:19:5B:C5:85:16:62:AE:76:E0:44:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:7b:5c:1e:5b:98:82:88:e7:87:2c:c8:d4:d5:b1:29:8e:
         0e:76:4a:34:5c:ac:67:30:24:32:90:cd:8c:03:4d:24:d9:a9:
         be:c9:f2:9f:8d:db:4a:ba:c7:ab:e9:38:d0:f0:e0:dd:1e:dc:
         c5:1b:8d:90:00:97:4e:d2:4d:4a:6f:18:59:4b:ac:a8:b3:34:
         27:2c:b7:cb:53:43:c5:fa:31:97:26:7c:6f:a8:c2:48:99:85:
         f0:67:43:f1:ff:99:9e:60:78:25:9f:48:29:33:67:c1:b4:52:
         48:1d:2f:25:d8:42:a0:61:bf:73:56:fa:22:b5:d5:15:38:da:
         3f:fe:22:69:48:97:38:b9:83:39:06:fc:32:88:26:94:50:ae:
         51:3e:ff:b2:3a:eb:58:fd:17:f5:f3:75:f1:74:7c:7e:61:83:
         3a:d7:c6:b3:92:d1:e4:3d:41:32:b0:9a:56:c7:ce:bd:26:2f:
         60:b9:3b:30:2c:dc:39:fb:f5:41:0a:90:2b:f6:fd:4f:91:c6:
         1b:ad:ca:ff:78:14:23:99:54:20:b1:ea:83:a8:ea:a2:a5:2b:
         71:43:87:c1:0e:b3:c8:6c:79:3d:1a:58:6e:83:ca:1f:1a:f1:
         8a:a3:66:ec:e2:bd:bb:d6:37:11:00:b2:73:2b:63:43:be:0d:
         85:21:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:58 2024 by rpki-client on console-fra.rpki-client.org