Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa
File:                     32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json)
Hash identifier:          MBKCup3kxVXhr1mbKNLH8WuPl7TnE4AD79V8qMNuPWg=
Subject key identifier:   DB:FF:CD:3A:1C:AB:A1:05:81:4D:18:15:3D:62:B1:72:4B:9A:D6:DE
Certificate issuer:       /CN=371710da-4c28-4923-921b-e1d710cec29e
Certificate serial:       010D0C9F4328584793B1238520A3AAFE988EA840
Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     36861
IP address blocks:        208.68.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:23:85:20:a3:aa:fe:98:8e:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=9edcc86e-a51b-454f-a523-cb8f24493fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:12:16:8a:5d:5c:20:b1:5a:37:e8:e6:6f:
                    0f:85:ed:6c:e0:bf:1b:a4:cc:66:0e:07:3e:36:4b:
                    e1:55:e8:e0:4b:56:3e:48:c4:5f:05:64:0a:e1:33:
                    d7:34:bd:a5:0e:ce:47:ec:f1:f0:a6:9f:ed:d7:ff:
                    a3:0e:9e:69:ef:2a:00:30:56:ff:a6:b5:8a:4f:e8:
                    c4:c6:53:2b:51:10:72:7f:63:9a:06:5e:e7:e4:1b:
                    18:72:b1:33:e3:fe:97:a9:47:fc:2b:a1:3b:29:ad:
                    43:7a:9f:35:1c:81:c6:c9:20:c3:26:02:a6:d5:67:
                    2e:53:ee:f3:07:0c:ae:22:82:0c:af:fc:79:a6:55:
                    42:67:c9:14:e7:c1:1f:b9:d9:eb:e6:4e:35:8d:05:
                    ff:cd:1a:44:dc:ff:19:b6:d0:4e:41:60:38:19:74:
                    b5:99:d2:a6:08:e7:5a:f0:7b:e5:b7:3d:22:db:d9:
                    bf:82:f6:7e:80:cf:63:0d:ff:97:5b:91:2a:fa:11:
                    14:da:b2:08:ee:ad:03:0b:c5:24:06:85:41:cd:3f:
                    2e:0d:08:8a:95:15:e2:21:b7:c3:c2:21:8c:d5:ad:
                    e2:a2:0c:30:a2:71:1d:db:58:0d:6b:95:5c:46:00:
                    7c:f6:77:45:e5:f2:26:3d:3b:2a:b4:c9:d1:a3:8c:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:CD:3A:1C:AB:A1:05:81:4D:18:15:3D:62:B1:72:4B:9A:D6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:32:0a:58:30:fa:3f:83:1d:ab:b8:6c:ed:fb:25:c9:ec:
         d1:01:15:90:d2:9e:08:55:0e:2b:c2:52:68:a9:46:8e:b4:44:
         fb:7e:15:00:7a:e9:ee:30:50:ed:db:9d:2e:1b:fe:42:91:ee:
         2a:10:fc:d4:1d:55:63:1e:4f:7a:a2:45:be:3e:61:2c:ec:a9:
         3e:2b:3b:80:85:06:75:bd:f8:38:a8:4e:84:83:f2:1d:d8:9e:
         cd:80:45:58:e2:15:bc:ad:32:fa:43:8e:0e:db:79:d5:d5:4f:
         41:63:f8:7d:78:68:f9:30:27:84:b1:be:91:74:2c:42:da:c0:
         d2:f8:5d:06:c0:3a:c9:0e:a9:8b:9c:e6:95:f9:9b:bc:d8:41:
         f3:99:31:f1:6f:a4:c7:1a:24:10:93:78:36:a9:d3:19:c0:5a:
         59:8c:6f:b6:e3:f6:59:92:2a:7d:02:81:43:ff:50:54:ab:32:
         00:c6:e6:bf:e7:c9:e1:af:0a:42:4b:08:c8:fe:08:ec:22:6a:
         5b:0c:cd:58:b0:49:ca:f8:b1:b8:ab:03:b1:cb:ab:d1:a9:3f:
         ec:5a:58:48:fe:d4:90:b1:ef:a4:b3:b0:3d:0a:f7:ad:8a:78:
         b2:66:71:d5:13:65:dd:9b:ef:dc:45:07:92:66:b1:b6:9f:3a:
         a3:d5:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org