Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
File:                     bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa (raw, json)
Hash identifier:          +PthqWcAR7To69d9pr0qvvQP2/gokFgSPde41HjaK2U=
Subject key identifier:   AE:F9:6C:DC:D4:99:93:9A:58:A3:7A:8A:95:72:C8:99:70:D5:C9:CD
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858475BDB7C3FFEC1AFD1019E7A00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     394708
IP address blocks:        216.255.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:7c:3f:fe:c1:af:d1:01:9e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=7705b04e-fab8-4ed2-a0be-fc29af39c60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:30:93:88:37:3b:fd:6d:ac:36:c4:f7:66:
                    d2:a2:aa:35:ec:20:e7:9b:e2:2c:6d:62:46:bc:3e:
                    75:ef:03:8a:d7:6f:a5:d5:c3:e0:39:90:43:9a:35:
                    56:e2:29:ac:72:5f:79:33:e0:b2:0d:7d:b0:a6:04:
                    bf:09:27:90:91:97:13:75:66:21:5a:3d:10:1f:22:
                    6f:38:b1:d9:f1:48:69:95:b3:63:a7:1b:88:fc:05:
                    74:7e:dc:d0:9a:88:f8:92:17:dd:34:16:60:b1:f1:
                    dc:c7:13:51:30:2e:8a:af:04:31:f8:7c:e3:7c:75:
                    3a:8c:ef:f6:38:3a:85:93:1c:ff:2d:75:c6:68:1e:
                    1f:1e:6e:71:e5:c5:a7:fc:af:b8:c5:c9:fe:01:a5:
                    a6:50:67:74:71:66:b0:98:73:f3:62:85:1b:13:db:
                    97:69:01:f4:27:56:da:68:61:18:b9:43:20:fb:a6:
                    ea:64:7f:2a:60:2c:b9:ae:d2:4c:aa:79:8c:22:dc:
                    25:d8:2f:c7:99:33:98:4d:e9:26:69:f1:d4:ff:33:
                    42:43:5e:51:11:53:57:29:33:57:83:fa:d8:61:52:
                    66:18:ec:8c:fb:21:0a:e4:90:24:e2:cb:b0:6b:f8:
                    b0:53:88:ce:4c:21:6c:14:f8:8e:6b:78:cd:3d:31:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:6C:DC:D4:99:93:9A:58:A3:7A:8A:95:72:C8:99:70:D5:C9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:3e:8b:8b:a7:54:ec:05:2e:f8:8e:a9:a5:ec:3c:0f:b8:
         1b:42:35:89:04:51:28:51:3d:85:6f:70:e3:07:49:ec:66:66:
         54:88:e1:21:3a:df:01:16:98:cc:4c:f5:92:02:d7:a3:b4:5e:
         d0:b4:72:20:98:52:7c:fa:1c:ff:75:4e:3c:39:be:15:8f:d7:
         60:bd:28:cc:2c:99:18:d1:4b:f9:f9:21:3a:0f:5c:a9:44:a4:
         dd:3d:73:57:0e:4c:81:8c:38:88:3e:57:0b:39:92:5d:ad:bf:
         27:91:3d:1e:62:10:43:89:bf:81:b7:6b:6c:56:15:62:43:8c:
         04:19:e5:df:37:28:25:03:ac:a3:4e:65:ea:3f:e0:d8:8f:b8:
         23:48:4b:33:68:6c:b1:5a:d0:2b:05:91:3e:fb:2d:51:e0:4b:
         4e:8e:4a:10:cc:5b:45:8f:ee:61:9e:46:23:fa:02:27:a7:bd:
         f8:1a:15:61:93:ef:52:13:1d:98:2c:da:af:cb:77:5d:a0:b6:
         61:6a:b9:59:fb:18:3a:41:09:ca:89:52:7d:16:9e:83:cf:00:
         9b:b5:4b:59:96:21:07:80:fd:2f:98:0d:fa:70:f2:a5:b5:a8:
         ac:98:4a:63:ec:00:89:d4:89:28:80:42:2b:2a:5c:1e:ab:b2:
         90:e8:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:58:09 2024 by rpki-client on console-ams.rpki-client.org