Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa
File:                     ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa (raw, json)
Hash identifier:          XLoxxRzdp4j88x7YU3xZ+C349RyWhK0fxNSNatyXgSA=
Subject key identifier:   D6:83:2B:2B:72:26:38:2F:9E:F4:0C:1B:6B:DC:97:4B:9F:7B:B2:2A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858474585FBF081C6B480636A0700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        207.53.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fb:f0:81:c6:b4:80:63:6a:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=7290b5f7-6aae-430c-9676-09652b7177a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:2f:68:35:6b:2f:f2:fd:bf:23:46:13:a5:
                    c2:68:14:a5:73:18:69:48:b8:cc:b2:96:3b:45:a9:
                    6c:5e:b9:f3:a5:b2:17:93:5d:74:9b:71:c4:47:80:
                    56:db:d6:ca:ed:b4:1b:db:ba:f0:31:c6:79:9e:c8:
                    1b:d9:44:78:ad:f0:1a:bd:b9:4e:e9:c5:5f:0d:1f:
                    2d:fd:6d:f8:9b:4b:ff:22:05:0d:49:97:72:a1:9c:
                    4b:f9:21:0d:b4:fa:f0:38:99:f6:61:3f:18:4a:99:
                    bb:b1:b0:95:78:71:a6:ab:06:1c:14:69:d7:58:2a:
                    70:a5:d4:84:cc:94:57:fb:74:10:a8:67:a7:17:f2:
                    1c:af:c4:c6:91:08:23:00:b9:e7:1a:41:60:72:11:
                    eb:e9:8a:b3:9e:6f:4c:9a:06:6a:ca:b6:80:53:9f:
                    f7:ee:27:5b:96:11:27:88:97:ae:65:75:84:65:67:
                    d3:61:c9:c7:0a:65:4f:8f:9e:b1:74:98:f3:2f:c3:
                    e2:9b:7a:38:c2:a3:43:4a:19:96:93:02:6e:31:c7:
                    37:96:14:46:65:db:e3:79:4c:76:2e:4b:08:76:b9:
                    23:4b:f3:ad:4c:c8:7a:5b:d2:a4:83:d1:49:4d:c3:
                    06:ed:ef:39:e5:56:fc:3c:cc:17:27:3a:f2:48:5c:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:83:2B:2B:72:26:38:2F:9E:F4:0C:1B:6B:DC:97:4B:9F:7B:B2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.53.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:cc:1a:7b:1c:27:2b:39:f4:39:6d:f2:6a:dd:69:5b:ea:
         0d:0b:dc:df:37:e2:52:ed:17:78:51:a7:08:cd:11:41:d0:a5:
         1a:4f:cf:e2:1d:f4:98:65:1f:d1:1a:6e:85:d6:e4:77:76:17:
         15:2b:49:c3:8c:a6:c3:7e:b1:0e:4d:16:2a:19:16:5f:50:a1:
         72:f8:1a:3f:b4:28:43:3a:91:00:b4:fa:ae:1a:b8:cb:21:e7:
         2d:73:86:50:f0:c7:b5:84:de:39:76:6b:60:83:9c:f6:26:36:
         c5:fd:09:45:87:e9:4c:17:83:06:ed:61:9d:86:3e:fc:09:03:
         70:be:99:ae:27:17:3b:06:e9:d7:10:81:48:9a:cb:d1:ed:ff:
         37:e9:35:fa:d5:20:dc:cf:7e:af:b6:98:f5:9a:c8:bd:75:85:
         f9:2d:60:08:e6:93:a3:cf:09:18:00:7c:02:c7:97:c5:67:65:
         68:a9:13:52:e5:f4:bd:82:19:42:ba:b4:34:e3:89:d2:3c:c7:
         32:c9:11:4a:f6:fd:aa:36:f3:4a:51:ad:dc:d3:a8:bf:3f:c9:
         29:99:fc:17:fd:41:c5:a6:e6:eb:20:88:1c:24:bc:5e:74:51:
         ff:61:92:82:04:8a:03:7b:ff:d6:36:19:92:85:7d:27:50:50:
         13:03:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org