Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa
File:                     c4d0d21f-1690-36d6-8c24-202cfa311060.roa (raw, json)
Hash identifier:          UrlgyS1giov9GSbQMVjbO3m/tu//LLPvDqstsOkGsU4=
Subject key identifier:   9F:B9:16:0C:15:E1:83:5C:0D:43:32:A4:56:D6:73:1C:2E:C1:D7:3B
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F43285847F84F890365C60F819A104540
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     394710
IP address blocks:        209.216.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:89:03:65:c6:0f:81:9a:10:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=b8d5ad62-8577-46bd-b51c-c38b2564beb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:33:8f:6d:ed:99:38:bf:4b:46:6f:15:38:
                    37:87:77:b5:c7:35:be:21:2c:54:3e:24:9d:1f:4d:
                    77:0a:49:e4:1b:fb:ec:08:fe:96:c8:0f:76:7f:48:
                    18:42:10:8b:16:b3:20:2b:b2:05:55:24:cb:50:ad:
                    55:e7:2f:78:59:5f:ca:5a:a7:6b:4c:43:74:98:a2:
                    dd:8a:e5:43:ba:5c:45:92:cc:89:f9:b4:30:cd:19:
                    6c:b6:c0:af:ad:97:c1:f8:75:19:5b:19:8b:fd:36:
                    18:f1:48:e9:ce:4f:35:15:3e:6e:45:ad:ab:e7:a5:
                    b0:3f:6d:d1:60:ca:17:87:bd:b1:92:f3:62:c9:3a:
                    06:6b:5f:5c:fe:ac:f6:06:fa:be:3d:14:49:cb:24:
                    f7:ed:0a:78:34:57:98:5f:82:05:34:af:b4:7b:9c:
                    9a:d3:3f:47:ea:8c:99:e1:f6:91:f3:e7:c8:41:2f:
                    eb:c0:1c:5a:32:47:e1:c2:f6:25:09:ae:9a:91:41:
                    b8:ee:a0:b7:e0:e8:de:72:4a:da:fd:81:1e:47:71:
                    68:5e:65:82:83:c8:17:48:10:6b:70:16:a9:bf:fb:
                    5d:1e:48:88:82:ab:57:d3:7a:90:8b:4b:5a:fd:8b:
                    05:2f:2f:30:5a:93:c7:55:20:b2:76:f6:eb:92:c2:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:16:0C:15:E1:83:5C:0D:43:32:A4:56:D6:73:1C:2E:C1:D7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.216.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:6c:e3:c0:eb:62:74:5c:15:dd:8a:be:02:d9:5e:85:e8:
         d0:44:6c:a6:b5:a3:8a:48:ec:7a:c0:e4:bc:18:df:21:a4:07:
         32:35:07:55:cd:6b:75:4d:bd:67:51:c6:37:42:57:74:b2:b1:
         82:64:c1:d1:8e:cf:7d:40:bf:cb:4d:51:90:b0:4a:8a:05:c9:
         9b:32:c1:d7:bd:38:8f:9c:45:0f:62:7a:3f:d9:5b:b8:64:0a:
         e5:84:73:de:27:b6:d4:d1:93:33:b8:e7:38:1b:64:ff:fb:50:
         6b:f2:7e:79:fc:c5:c3:ac:f1:f7:2b:b9:77:0a:9d:43:24:4b:
         14:2a:59:8a:04:7a:b6:27:04:85:aa:a8:28:09:40:86:cb:8f:
         4a:b3:77:8e:cc:e7:10:7e:67:7b:c2:b1:5b:07:3a:70:07:58:
         37:3f:87:13:27:dc:cb:5b:f2:c5:0d:0c:aa:77:0e:fd:80:ac:
         65:50:95:94:a9:34:e9:c7:73:43:9e:92:00:ae:60:f8:f9:5d:
         c3:b7:fc:fc:55:df:29:56:7e:66:b7:29:a2:d8:4d:68:e5:84:
         ca:fc:48:36:f6:2b:f8:fb:52:e4:fd:92:4c:dc:85:50:33:d1:
         c0:03:9b:44:e9:af:a5:38:e8:13:ae:31:3f:ec:27:19:ce:67:
         6a:a6:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:35:24 2024 by rpki-client on console-fra.rpki-client.org