Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
File:                     0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa (raw, json)
Hash identifier:          NfgQzVZZhbC88p2d7OWiLLmCQ5LXB2aZVYt7bOdB5ms=
Subject key identifier:   8E:66:E5:A0:00:D3:4E:34:3F:D6:02:0C:ED:A9:B1:7D:54:0A:2B:B3
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F43285847E159F866DD74C9125F2FDC40
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
Signing time:             Thu 14 Nov 2024 20:38:06 +0000
ROA not before:           Thu 14 Nov 2024 20:38:06 +0000
ROA not after:            Wed 12 Feb 2025 20:38:06 +0000
asID:                     396982
IP address blocks:        216.71.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:59:f8:66:dd:74:c9:12:5f:2f:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Nov 14 20:38:06 2024 GMT
            Not After : Feb 12 20:38:06 2025 GMT
        Subject: CN=1bde1b13-7a63-4e0e-9b9c-70a8a4a7f5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:67:13:3f:a9:8c:d8:ac:ed:a0:54:12:b6:
                    2d:a9:bb:03:eb:71:6e:a2:cd:5a:f2:11:18:86:93:
                    f6:0b:a0:36:ff:dc:58:7e:0f:33:56:1f:ce:d2:f2:
                    48:60:62:b8:13:82:25:86:6d:d1:c0:6b:1a:14:c0:
                    52:1b:22:cf:22:f5:42:11:38:48:24:30:b0:7e:95:
                    1b:d7:ef:9e:a6:d4:5e:02:c8:2e:de:d8:bc:e1:03:
                    a3:0b:57:15:91:c1:3c:c7:f8:99:ed:cf:e4:1d:71:
                    d0:1f:ae:99:7f:83:c2:25:9d:36:73:ff:74:fd:dc:
                    98:64:12:f2:5e:56:bd:46:25:5d:b0:35:47:8a:b4:
                    6c:1a:24:85:b9:a2:a5:7b:be:52:8a:a6:7f:da:34:
                    66:ea:08:d5:0f:28:72:53:fd:3b:04:16:1a:9d:d4:
                    33:50:49:92:79:2b:b6:91:4d:dd:e2:82:dd:39:66:
                    d9:dc:71:57:cf:7f:ce:86:5e:bd:aa:72:5d:5a:ba:
                    50:e7:88:0f:3f:c9:cb:af:fe:85:90:6d:1f:61:21:
                    5f:a8:5f:5a:3c:76:28:e3:66:48:06:97:63:33:4c:
                    ea:92:af:98:fb:ee:fa:af:18:79:52:3e:34:26:2f:
                    fb:9c:e5:61:28:95:53:77:86:e3:43:78:88:e1:1a:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:E5:A0:00:D3:4E:34:3F:D6:02:0C:ED:A9:B1:7D:54:0A:2B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:77:3e:2d:7d:e4:43:58:16:e9:2b:17:b9:73:8a:2d:de:d0:
         e2:47:2f:8a:18:f6:db:18:42:c3:fc:09:44:f6:11:4f:6b:a0:
         3a:71:ad:e5:05:b5:80:cc:6b:06:7a:34:a4:db:a8:0b:46:e8:
         81:80:74:2d:e7:75:1b:8b:3e:77:0f:af:f2:11:ef:b9:a4:78:
         fc:b8:7f:55:3c:fd:20:8d:f4:60:21:bc:f6:f2:48:7a:ac:2a:
         32:53:de:5d:57:99:dd:22:3b:42:0c:2f:80:4e:a2:b1:34:28:
         48:0d:b8:72:19:97:4a:a0:66:65:a7:1b:90:ae:e0:31:9e:21:
         70:64:0c:36:6c:d6:24:f4:9c:b3:ad:92:a7:3e:76:5c:1a:8f:
         51:e2:b6:74:e0:eb:61:e5:d7:4f:8e:a9:8a:7d:b9:d3:fa:1a:
         0f:8c:ac:3a:a4:c5:28:51:ee:86:9f:a2:84:e4:8d:46:45:18:
         d6:06:66:ee:3c:ba:18:d3:de:4c:92:61:f8:be:dc:0e:c9:b9:
         49:30:94:42:af:b9:60:63:27:f7:17:59:2d:f5:bf:17:0e:aa:
         61:a8:64:e9:db:1f:9b:fc:2a:6a:57:68:d5:e9:f1:72:76:0e:
         20:37:12:58:e4:47:43:8e:fc:f7:c9:22:41:a3:f2:71:64:d8:
         90:92:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org