Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa
File:                     e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa (raw, json)
Hash identifier:          iiVzbLgwpLW9E26sOk+H/+lM30w2BIG+3QSZk1Adtbo=
Subject key identifier:   8F:AC:32:F6:97:C5:C9:49:91:74:FC:3E:0A:9E:09:93:0B:52:DD:D3
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F43285847888656C83167762891E94C30
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     3257
IP address blocks:        206.183.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:56:c8:31:67:76:28:91:e9:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=42c43b8b-8248-42e0-b150-3772e5df8204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:4b:fd:7a:74:95:b0:95:7a:13:66:a7:50:
                    6d:38:68:c7:9b:bc:92:21:22:a9:52:14:2a:9c:e0:
                    ec:6d:a5:cc:9f:58:e1:d2:ce:3c:d2:ed:55:0a:4c:
                    e7:e9:3e:f0:83:01:9d:2d:7f:77:46:dd:aa:ea:63:
                    be:08:48:6b:0a:6b:9a:2f:71:b0:e9:26:b0:f9:47:
                    5a:6a:ff:d3:21:16:79:d1:43:94:3a:28:0c:c1:ce:
                    f3:b0:4f:1c:c1:93:d5:0e:54:e7:8c:d7:9b:e8:58:
                    bc:bf:1a:a7:68:75:84:51:b9:d6:ea:bb:00:27:70:
                    4a:f0:a7:7e:c5:38:17:61:8a:be:aa:be:74:c8:87:
                    73:77:a1:a4:0c:de:ba:24:bb:b3:48:24:87:d1:83:
                    52:c4:ef:82:a8:53:9e:23:5e:91:e2:6b:0b:5d:e5:
                    bd:18:c8:b4:c8:c0:0d:1b:73:8e:aa:5d:b9:6f:2f:
                    96:94:4b:8d:1b:13:1a:1d:54:dc:76:ac:fd:65:1c:
                    f7:ed:64:b5:f2:6d:3c:24:dd:11:89:d0:14:7e:ff:
                    ba:90:2b:83:1c:11:82:10:fa:1b:55:b8:52:6b:8e:
                    60:72:38:ab:0e:e3:dc:ea:a1:2a:b8:3f:d2:0e:9b:
                    48:52:94:94:13:18:47:03:53:3d:44:d3:2f:9e:59:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:32:F6:97:C5:C9:49:91:74:FC:3E:0A:9E:09:93:0B:52:DD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:27:31:96:c4:46:e4:5c:ed:ea:dd:7d:04:e9:3e:ef:95:
         64:6d:fa:13:d6:81:59:c9:5d:9f:43:79:1b:7a:32:15:df:f1:
         e9:ce:07:d9:61:1e:f4:80:55:a5:c5:44:6b:28:da:94:60:33:
         9f:92:0d:f1:3a:8e:32:fa:e2:dd:4d:32:b4:00:26:4e:56:a2:
         e6:d9:a6:22:0a:36:06:67:d7:9c:e6:17:f5:fe:97:5e:19:62:
         37:48:26:a8:4b:41:59:ab:9e:97:e2:79:f1:aa:ae:a2:72:7e:
         08:ef:4a:cf:74:b8:62:af:63:47:80:b4:8c:c2:fd:d2:4a:e5:
         74:73:df:79:69:45:89:b1:78:8f:1e:53:51:c8:f3:84:8d:dd:
         7e:ab:95:6c:31:28:09:3d:0e:ac:73:2f:fb:86:a6:d5:47:6d:
         a4:74:2a:bc:01:43:57:e4:78:41:64:61:1d:6c:bc:1a:d0:ee:
         0a:38:64:79:57:e4:4a:06:2b:87:00:0c:80:12:a3:4a:ec:bf:
         19:de:2f:67:d7:fc:65:7f:4d:01:fe:9a:87:73:68:c0:d0:d5:
         bd:24:1c:9e:f2:5c:1c:61:05:6c:4f:fd:86:bc:88:0c:e7:29:
         8e:c7:00:ba:1d:d6:d6:16:98:ed:ae:21:3f:a3:85:eb:e6:28:
         7b:18:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:50 2024 by rpki-client on console-fra.rpki-client.org