Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa
File:                     c6404273-f9e6-396f-bc63-86b36f978a42.roa (raw, json)
Hash identifier:          iJONdDzqhK86o1tfK37xSxL2VFl1G5vB6LOZxgVjwzA=
Subject key identifier:   4E:E1:A3:51:02:82:8C:E6:13:97:9A:BE:75:19:02:6A:47:53:83:28
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858475BDB7D79DA89B33BE8A05C26
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     394708
IP address blocks:        209.173.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:7d:79:da:89:b3:3b:e8:a0:5c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=daad5b2d-7473-41c8-be3d-b80467fea4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:3c:1e:a6:28:ca:d8:39:36:8f:78:50:55:
                    91:8d:ad:3e:fd:c7:42:be:e8:9f:9a:5b:52:97:3f:
                    9a:65:a9:1f:e2:5b:ce:ff:73:a9:eb:bc:65:40:41:
                    55:a3:37:6e:20:9c:36:0e:cf:ac:8e:8a:71:00:57:
                    fa:14:66:5a:29:54:7a:a7:fa:f7:ed:85:45:8d:a7:
                    80:0a:a9:c3:6b:de:b3:d5:5d:5d:63:82:4a:43:5c:
                    b2:e5:55:cc:1d:dc:b8:be:f5:01:28:f6:1f:e2:d1:
                    5e:38:c3:90:e5:97:88:5d:c6:00:32:0e:7a:5b:9f:
                    1a:50:ba:e4:a6:ce:3c:82:ab:a2:a5:69:94:ce:52:
                    e3:82:5a:2b:ad:07:45:72:dd:7c:20:29:8f:53:db:
                    68:e3:f2:12:1e:44:66:f2:c3:22:85:77:92:c0:09:
                    9e:e6:42:af:56:64:9e:c6:ee:08:94:c1:e1:33:7b:
                    5a:24:b5:96:68:30:a6:cf:de:cd:c1:36:db:44:d7:
                    63:2e:d9:68:70:4c:ab:70:66:b8:99:87:c6:1e:60:
                    be:2f:f4:6d:4d:aa:81:70:f6:c8:44:85:4b:0f:50:
                    29:e3:fe:a9:7e:97:67:c9:48:1e:03:89:af:99:62:
                    4e:35:80:ae:a4:82:8e:bc:fc:ad:23:72:4c:23:1f:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:A3:51:02:82:8C:E6:13:97:9A:BE:75:19:02:6A:47:53:83:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:77:a7:ef:3f:91:fa:31:76:2e:60:7c:e1:70:8a:94:2b:6d:
         4c:40:39:8a:58:13:f5:20:03:30:63:95:42:e1:9f:7f:e1:ab:
         e8:f8:71:3d:a0:08:49:76:d1:1a:d4:0a:4c:40:ef:1d:9d:c1:
         3b:34:48:d8:52:2a:44:ba:7c:1a:ad:0d:aa:ec:75:6d:14:a1:
         cb:d5:1f:39:e8:31:69:32:df:3a:68:86:fd:81:4c:b5:19:8d:
         81:7f:79:b0:c8:7d:12:d3:3c:b5:06:b4:7d:de:c5:c3:08:61:
         ec:d4:ec:fc:14:df:91:a2:a5:d3:c4:10:aa:66:55:b8:34:d8:
         26:19:37:da:98:b0:4e:47:e9:2c:a3:86:41:c4:83:a1:9e:f7:
         ef:23:73:42:04:d4:51:b7:d8:2a:a8:39:32:a3:54:41:6b:ed:
         ea:8d:e2:f8:80:b9:8b:26:25:d7:75:cd:ea:de:3d:8e:bf:57:
         56:bc:be:3a:f5:be:d6:c6:d8:4b:9c:84:84:56:04:e9:2d:69:
         5f:a6:ba:f1:ba:17:9f:3f:8f:e7:51:7f:31:37:36:f6:92:c9:
         b1:a7:e6:5e:0d:a7:dc:8a:d1:3c:26:19:78:af:9a:12:07:da:
         d7:14:e7:13:f5:8c:36:e9:c8:be:16:61:6b:66:2b:2a:1e:3d:
         28:51:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:21:52 2024 by rpki-client on console-fra.rpki-client.org