Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa
File:                     29047bdf-2f51-33de-8db8-f319ec383617.roa (raw, json)
Hash identifier:          tAyui7cO2QF5iJmydI8Kquba1jgJpKos85Hf4RtjWJw=
Subject key identifier:   84:BA:D9:D0:C8:78:89:36:F7:1B:13:D1:A8:9E:1F:1A:8D:54:8D:F2
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F432858476E0103148F4AC6DB89BB8E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     13768
IP address blocks:        64.34.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:03:14:8f:4a:c6:db:89:bb:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=d4d78f78-f295-4599-8f86-d8d7f05e1897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:1e:f5:06:ef:1e:86:2f:a4:f8:61:91:1e:
                    77:81:0a:5b:85:af:e2:4f:ad:8c:6c:ee:eb:24:a6:
                    e2:37:82:cf:1c:6a:d6:7e:31:22:96:1b:75:5a:ec:
                    e3:09:9e:2a:8e:28:07:49:21:67:ff:4e:9a:74:38:
                    68:a6:ed:3a:c5:6b:47:ab:f9:61:49:4d:06:60:87:
                    fc:16:3d:87:be:67:7d:db:4e:2c:91:20:b7:f7:9a:
                    df:b3:57:69:91:6e:cb:33:1f:40:19:23:aa:6c:2e:
                    a8:5f:6c:11:c6:01:c7:d6:78:ed:1e:7d:ef:73:7d:
                    1f:1f:6c:04:e1:62:81:fc:86:2e:73:12:c4:fb:4f:
                    80:4c:5f:cf:a5:90:59:10:5f:87:fd:8a:1c:67:75:
                    de:b5:9e:e1:96:35:cb:f5:24:4b:02:43:db:d1:d9:
                    58:5e:02:80:db:4e:72:6c:92:38:6a:a7:12:e4:14:
                    1c:03:5a:31:a5:51:8e:e6:46:76:67:de:f3:3e:a2:
                    dd:dc:18:56:e2:2b:d3:54:c5:3c:b8:68:32:5c:20:
                    c2:55:8c:00:bc:9d:2a:a3:73:73:0a:66:cb:89:6d:
                    f5:2d:9f:4b:29:83:69:8a:2d:fd:7a:4c:a7:3a:16:
                    44:a5:21:44:f2:14:60:e9:89:2b:2f:89:a4:e9:48:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:D9:D0:C8:78:89:36:F7:1B:13:D1:A8:9E:1F:1A:8D:54:8D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:ce:97:62:f9:1c:6f:b2:aa:68:ea:88:b5:ab:0a:2d:33:
         bf:eb:b1:02:53:95:c4:b5:ef:65:e8:4c:8c:39:49:39:db:96:
         cb:07:ea:ee:be:30:7e:ad:d4:54:7b:6e:81:56:79:1a:0d:52:
         5c:51:4a:04:68:f0:cb:dd:c1:8e:57:7f:2b:66:47:12:92:86:
         e5:98:8c:b9:9f:ea:0d:43:4f:7a:17:49:5a:8b:8d:34:c6:26:
         45:08:07:20:1f:96:a4:a5:22:21:72:2c:06:7b:31:4f:fc:93:
         b8:4f:7b:0c:4d:57:dc:e4:5c:bd:af:c0:47:59:58:dc:1e:ff:
         de:f5:52:a7:83:43:bb:15:b8:92:50:51:ee:8f:dc:62:16:e6:
         08:af:67:7c:fe:00:ff:81:09:c0:1d:44:ea:a1:ef:27:96:f1:
         e2:72:b0:25:cc:ae:45:b7:4d:ac:ca:50:1b:77:9f:b7:d7:a1:
         9e:50:cc:d4:e1:5c:09:27:08:7b:4e:ce:1e:8d:bc:aa:27:ed:
         bd:21:3c:54:8f:73:87:c0:af:7a:6f:cc:77:ef:77:24:ba:49:
         9f:a1:c6:6c:f0:5d:f3:f6:00:fc:63:ba:90:80:12:0b:55:95:
         73:91:22:3c:a1:56:fa:fb:e1:a1:1f:07:08:12:3c:d3:3b:c2:
         f8:1b:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:29 2024 by rpki-client on console-ams.rpki-client.org