Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa
File:                     a1c10821-38f2-367d-a4b9-f403c18eed50.roa (raw, json)
Hash identifier:          JKA/Ub1xVo9TlRamMmUb7oW2AMl4Y9WGJeMaOZWwPSk=
Subject key identifier:   CF:52:82:E5:4D:D7:C0:1B:0F:EB:42:8C:19:89:B4:63:4C:12:8D:22
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F43285847967BCB27B4927F66E4198384
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        206.15.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:cb:27:b4:92:7f:66:e4:19:83:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=db1e08d7-f229-401e-9b16-395a91653c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:c4:9d:ca:26:47:74:10:70:08:5d:7f:bb:
                    1f:07:15:46:10:56:93:65:c2:76:9c:57:d3:eb:85:
                    23:0d:50:2b:f6:bd:e2:a6:f7:f7:3b:e7:7c:b2:53:
                    08:6e:39:6f:1b:65:57:05:90:ee:e7:bf:d1:bb:9d:
                    8e:54:4f:1a:21:c6:9b:7d:57:ef:3b:64:4f:8d:0f:
                    49:5e:bf:c4:21:00:66:f4:8f:72:54:df:c2:01:f1:
                    35:8b:7c:66:d4:19:31:ff:77:ba:3e:77:33:dd:64:
                    1f:fa:a8:58:0c:da:07:62:e4:90:55:55:ec:c7:2e:
                    64:46:6e:ea:cf:c9:9b:bc:0f:99:24:63:28:ee:cb:
                    56:8d:80:11:e7:19:ae:2e:e4:34:af:e6:dc:f9:ac:
                    f3:05:77:ba:8c:ab:c4:9e:56:9c:f9:06:cb:c5:3e:
                    b0:7e:e4:ec:91:7e:e0:09:a9:c7:97:3a:59:4c:1b:
                    be:64:c3:0d:23:b9:e2:a2:a1:d3:de:43:fd:cb:8b:
                    88:ab:29:46:ab:d9:98:fa:19:aa:b0:b9:29:b9:0e:
                    ff:f5:ba:18:75:93:3f:55:f6:91:f4:a4:80:60:0e:
                    f3:6a:f2:a7:b2:cc:59:da:1a:ac:bc:40:a5:59:69:
                    58:b3:7c:17:7d:e2:e3:ff:db:b2:98:9e:70:87:fa:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:52:82:E5:4D:D7:C0:1B:0F:EB:42:8C:19:89:B4:63:4C:12:8D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:2c:2f:df:18:58:8b:30:a2:30:96:5b:a1:60:10:68:49:
         37:f6:ea:3f:f1:c7:43:54:55:0e:71:f2:b8:45:ff:29:0d:a2:
         a2:b7:2a:8d:11:a5:e1:0d:48:b5:b6:7c:ae:a3:66:6c:32:66:
         62:ea:0b:cf:ae:68:e7:1f:0c:db:66:5b:37:de:37:06:f2:97:
         ab:91:5e:d8:2b:4f:8b:e3:a4:9c:80:9a:b0:76:7f:c6:7f:d4:
         c0:62:87:f7:58:c4:78:57:8b:8e:61:11:98:b2:ac:a0:8c:0d:
         00:04:7b:f8:8b:34:1d:44:b0:55:9d:f3:87:a0:c7:79:af:a4:
         c5:99:f5:01:13:5f:d5:ea:dc:7b:fe:43:61:69:c2:01:bd:43:
         87:db:01:75:5f:e0:68:a4:60:b7:25:9a:36:dc:1c:6d:52:1a:
         82:e2:0e:0f:8f:d5:04:2d:0c:43:3b:e6:78:f2:a7:57:2d:70:
         a0:0d:a4:10:25:7b:e0:47:c9:20:b9:39:6c:a6:93:bc:5c:d6:
         90:38:27:8f:1b:a9:d5:6c:c4:0c:1b:f0:53:b8:0e:01:66:cb:
         a7:82:e3:36:00:96:82:2f:77:93:82:8b:63:d5:d5:68:c1:eb:
         c9:1b:09:cc:bf:fd:e6:7f:92:1d:27:3f:a2:38:36:4b:9b:45:
         fb:9b:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:16 2024 by rpki-client on console-ams.rpki-client.org