Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa
File:                     898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa (raw, json)
Hash identifier:          IK2GK8CkoDOe/V5a4C2o7w5R+zucsZy9Do1dwYsFSYI=
Subject key identifier:   66:52:4A:AD:8B:4C:4C:44:9F:AF:56:7D:FA:1E:A2:CB:48:6B:6D:4F
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285847C3448F46159BED57D1D684C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     13768
IP address blocks:        65.39.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8f:46:15:9b:ed:57:d1:d6:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=06213d19-20c7-4231-8aec-bdf1d4df74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:1c:b8:c9:55:4e:da:f6:0d:83:8a:d0:2b:
                    9e:72:78:75:da:27:17:e5:5c:88:b0:7a:4c:68:df:
                    c4:15:de:93:5a:08:2e:73:c0:5e:30:2d:51:ae:a9:
                    8e:96:63:e3:c6:53:65:c1:38:4f:d9:9c:e0:7b:4c:
                    36:bf:20:a7:48:c6:dd:bd:fa:6a:01:f1:9b:53:22:
                    87:f2:99:ee:a1:8b:06:61:3d:c6:df:48:87:f6:1f:
                    d9:f9:4a:7d:69:e0:17:6c:12:f3:93:8c:95:dd:e6:
                    6e:c6:1c:4c:63:1e:97:85:d7:cb:2a:db:c7:b7:09:
                    5c:cf:c4:87:a4:b7:b8:a8:cc:bf:ba:7c:a7:00:34:
                    f6:7f:1a:d8:34:9e:26:ad:b1:b1:b7:c1:d8:41:42:
                    1f:14:b8:5a:53:eb:86:35:90:a6:b2:fc:a6:60:79:
                    92:49:53:cd:d3:9f:47:96:48:00:a3:d2:f5:94:10:
                    4c:08:45:f2:59:c1:fd:44:12:8c:5b:59:bc:c0:50:
                    f1:e0:bd:fb:96:86:1c:a7:7e:2f:97:4f:0d:02:bc:
                    14:ad:d4:9b:10:57:5f:e0:90:e2:98:8b:eb:82:63:
                    8f:82:76:3e:47:45:44:58:6b:2f:a9:9c:8a:b1:70:
                    e4:34:1d:61:a3:87:63:86:61:dc:5f:f8:49:6f:42:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:4A:AD:8B:4C:4C:44:9F:AF:56:7D:FA:1E:A2:CB:48:6B:6D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:87:cd:ee:04:64:c6:a5:4a:ff:79:f7:47:ec:1a:dc:a7:79:
         11:42:11:18:e7:8d:af:0a:ae:55:94:c7:d1:ed:df:14:56:fc:
         e0:cc:aa:20:45:d1:a3:25:e3:79:16:e6:be:a7:93:37:84:06:
         78:9c:ba:ca:e4:77:84:82:c7:78:49:c0:ca:6f:ec:6b:67:8e:
         af:59:d9:4e:32:9d:72:a2:89:f4:f5:73:34:eb:fd:eb:ba:f1:
         cb:d9:13:e1:55:84:b8:fa:28:50:a2:27:87:7b:b2:e7:cd:ad:
         23:87:04:e1:e4:a3:e1:6b:9e:9d:55:30:d7:3c:64:0c:20:55:
         59:aa:75:50:fd:95:89:38:a9:46:fc:e1:eb:b1:0c:5b:2a:65:
         38:59:fe:11:6d:01:e5:c7:fd:a8:1d:d5:75:98:a4:04:6b:a3:
         2e:2a:74:e9:fd:dc:ec:df:d8:8b:a0:fa:f1:c6:dd:26:2a:52:
         8a:34:3c:08:00:90:e9:c5:dd:14:5d:df:bd:99:25:18:67:e1:
         19:41:be:ef:47:cf:e1:f0:c8:06:f9:45:c0:89:c8:58:af:5e:
         cb:1a:4b:80:59:43:ca:e1:32:8e:3f:86:21:ce:be:48:4c:51:
         1a:c3:1d:84:25:05:43:6c:3e:a2:28:61:b3:16:51:61:72:23:
         5f:ac:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org