Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa
File:                     661e319d-f202-3bc1-bec8-797d7d57a136.roa (raw, json)
Hash identifier:          TKsfbhQKk2OkQAopg8DNcwVHS3evXVj+kZl3AZBFo0E=
Subject key identifier:   9D:1C:5B:BD:BC:E4:0E:22:B0:40:18:6E:F7:70:19:37:25:0A:C4:25
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285847299B1B6EC4B310AEC79A1D00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     62707
IP address blocks:        173.243.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1b:6e:c4:b3:10:ae:c7:9a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=2d57cad1-740d-4d48-9f28-0df85fd8c1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:04:e2:a4:d6:0e:87:81:da:3a:36:71:ca:
                    6c:b9:24:28:22:c9:2f:c1:14:23:d2:15:bd:f2:81:
                    bd:97:79:3e:5d:20:d8:3a:2c:57:2d:3e:97:99:31:
                    7d:a1:ae:3c:55:87:b0:d9:b4:f2:fe:38:a9:bf:a7:
                    35:3a:91:d6:01:21:b6:b8:95:bb:87:b7:21:fb:fc:
                    2f:13:82:23:13:9a:e2:3d:fb:59:74:41:c3:35:7a:
                    bf:a8:0d:d9:ae:67:bc:02:71:4c:0a:e4:10:08:95:
                    23:c5:8e:4e:c3:b8:da:d2:b3:79:6f:ac:8b:4f:37:
                    a5:ca:d6:87:21:3c:4b:ba:92:49:f7:be:97:b3:9d:
                    aa:d9:92:1f:be:23:cd:fc:d2:15:cd:de:88:2f:fe:
                    8d:a6:b2:ac:2f:91:15:c8:66:ec:ca:bf:89:17:8f:
                    fe:a6:10:ea:6e:08:62:6a:b2:f3:d8:87:32:25:f2:
                    ed:92:87:94:5d:da:ef:92:8a:28:7b:3b:76:b5:b5:
                    40:11:39:4a:2b:14:e0:17:8b:bf:08:82:24:b6:92:
                    d1:60:cd:6c:16:bc:1c:ed:87:5a:80:38:50:bb:95:
                    c4:d6:ed:ec:1b:16:9c:68:db:86:07:02:3a:58:cd:
                    22:69:2f:f0:6a:3d:2d:75:27:78:47:72:12:90:a7:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1C:5B:BD:BC:E4:0E:22:B0:40:18:6E:F7:70:19:37:25:0A:C4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:48:be:6d:7b:46:02:e1:07:6d:1a:04:c9:00:43:09:ed:78:
         96:69:a0:3e:b9:3c:71:ad:3f:3f:68:c3:6b:b6:56:1c:c2:38:
         12:09:29:45:61:7f:cf:5e:c2:23:5d:a5:57:d9:14:4b:ac:80:
         47:bc:f9:1e:b0:aa:c3:59:5f:db:7f:86:12:82:84:0e:2c:f6:
         b6:02:48:8d:a0:f2:ee:87:a6:69:2d:a0:5d:bb:f3:42:81:3f:
         92:e4:13:37:e8:34:17:13:a8:40:0f:3d:e0:06:ef:83:59:ed:
         41:d6:18:e7:b7:e8:fb:20:79:d3:b2:ea:af:53:2c:a2:42:84:
         6a:4a:39:3b:90:f0:75:51:49:4d:71:c5:34:b3:b7:14:1d:c3:
         8d:a3:c4:f2:a5:8f:aa:c3:91:7a:b2:e3:ab:9e:27:7c:63:54:
         c8:ba:ae:ca:af:13:34:97:e7:87:e7:e3:e3:97:84:b4:28:b2:
         2d:11:b1:4b:00:fd:d3:80:86:07:a3:54:84:1b:60:a2:b5:c8:
         0a:82:aa:80:99:d2:69:fd:df:65:a7:7f:28:19:38:36:c6:e8:
         a5:2b:2f:3f:a7:6f:7c:e9:4f:d9:82:f0:fd:b0:1d:28:74:d0:
         f5:cd:e3:41:ce:89:17:52:91:73:c3:75:8e:cd:96:06:13:97:
         6c:3c:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:05:05 2024 by rpki-client on console-fra.rpki-client.org