Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa
File:                     6be9e0e2-cc84-3298-9831-8eaac9957de9.roa (raw, json)
Hash identifier:          1TVFgRLSLWZ+9SWbLz/ML8OEitF9gJyRf7Bx4PnBtyE=
Subject key identifier:   5F:2E:81:19:19:DF:BD:34:A3:EB:00:FF:79:B8:37:22:32:59:D5:50
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584750B0A828EF344106161F8580
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        170.62.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a8:28:ef:34:41:06:16:1f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=7df7c388-66cb-4dcf-a03d-a2ba1b761a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:81:3e:cc:f2:be:34:41:6a:42:e7:0f:08:
                    a5:fe:54:1a:05:28:e8:c2:5f:f2:fe:41:6b:96:4c:
                    8f:0d:47:4c:3f:1f:ba:08:5d:5f:72:cf:74:fe:f3:
                    f2:13:00:ce:9f:28:cb:1d:a4:d2:64:49:92:d7:e7:
                    01:71:65:24:01:38:13:b7:d8:41:b6:07:c9:e9:f8:
                    03:3d:98:b8:22:61:2d:d0:d0:31:92:b3:a0:cc:88:
                    60:c2:ce:0a:fd:1e:59:d0:5a:f4:d3:8a:7b:b3:f6:
                    db:a1:f0:bc:0b:72:f5:45:48:b3:84:98:67:b3:7f:
                    13:3f:0c:35:ec:eb:b2:08:f6:24:30:b3:88:55:b6:
                    ac:1f:c4:12:62:e1:9f:48:8e:9c:78:7e:02:ac:c3:
                    66:a0:d5:00:2d:85:c2:f2:d3:4a:3a:4d:db:8e:a7:
                    ac:76:4d:80:6b:50:87:e8:a1:15:f4:ac:81:86:4e:
                    42:ff:9f:a1:de:55:93:ae:4c:cb:20:2e:59:04:58:
                    ce:96:b0:2e:16:59:f8:44:09:d0:38:3f:d9:42:df:
                    d1:83:96:f3:eb:5a:f4:87:72:e8:f4:0a:fb:4c:9d:
                    7c:57:0d:27:01:eb:e9:ce:e9:f8:ab:38:19:8b:f2:
                    fb:d0:3d:e2:a8:a4:4d:8f:3b:39:f7:33:13:07:6d:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:81:19:19:DF:BD:34:A3:EB:00:FF:79:B8:37:22:32:59:D5:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:d0:e1:88:f5:f6:4d:a3:f0:84:9c:48:07:ef:d2:cd:82:
         2f:c8:22:ec:e4:bc:87:e2:35:2a:ca:48:7c:01:5c:2f:af:90:
         35:87:3f:0b:6c:5a:a5:e9:06:56:94:f9:87:05:e4:86:2b:28:
         9a:0a:67:3e:df:c4:b0:2d:89:c7:22:b1:c7:66:30:db:2d:e0:
         5b:6a:03:cb:16:f0:35:8a:0d:14:ee:a2:4f:66:b3:d1:17:a2:
         83:37:28:d1:19:43:03:3f:8d:06:29:e0:04:05:bc:8e:d6:b6:
         19:9e:f3:a8:9f:f9:b1:bc:fe:70:74:fe:99:9b:83:8c:53:5f:
         85:d6:3b:4d:d0:6b:b4:57:6a:da:11:e8:04:e4:33:c3:df:94:
         8b:c5:37:8b:43:21:9f:9c:84:19:98:c3:fc:17:42:13:a1:75:
         53:15:4d:af:a5:b2:7d:c3:0a:b4:25:c2:75:49:21:84:4e:41:
         b0:81:7c:a0:fa:0c:12:52:63:44:5b:70:34:92:1d:0e:cb:b1:
         dc:fd:05:ba:f3:57:5e:31:7b:e8:bb:39:66:e7:1d:83:84:9f:
         6c:06:d1:b4:d4:e0:24:c2:fc:6d:35:29:56:19:88:8e:67:be:
         8f:83:fd:db:2d:8c:7b:44:f9:b7:d4:33:cf:4e:f2:07:29:f5:
         aa:dd:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:31 2024 by rpki-client on console-ams.rpki-client.org