Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa
File:                     e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa (raw, json)
Hash identifier:          Ev+nsf/5IldbIY5vrdWyLKaPscJ50oziTtVZHeq7R5E=
Subject key identifier:   4B:1B:A3:B8:D9:0E:A7:C4:88:38:DB:98:F0:D0:C1:0B:56:CF:4D:69
Certificate issuer:       /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial:       010D0C9F432858476E00FFE425CEA239136A1500
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     10439
IP address blocks:        71.6.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ff:e4:25:ce:a2:39:13:6a:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=f1ef1d55-f08e-4a88-8266-adad832de641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:cc:40:a8:0f:b6:84:e8:27:82:65:a5:d9:
                    ad:2c:29:53:c2:91:cb:5e:63:54:16:3e:25:bb:33:
                    cb:14:0a:d8:d0:f0:25:c4:32:09:7f:36:ce:7e:b8:
                    a6:45:c7:74:e9:e3:11:4d:1a:87:17:72:26:24:8f:
                    e6:fa:96:ff:5c:64:88:b5:e0:18:73:c8:9b:ac:18:
                    08:9a:59:64:43:1c:d1:49:4d:b3:7a:82:43:15:a4:
                    78:93:67:d6:8d:17:a6:5f:fb:19:09:f4:6d:9f:db:
                    55:b4:02:32:0f:22:10:34:22:98:81:ed:3c:92:b0:
                    2e:ae:21:a2:ea:d9:e2:57:42:61:43:b9:e4:74:37:
                    a1:ac:f0:eb:bf:f2:b7:34:cf:80:d6:8f:14:db:b7:
                    05:78:36:10:67:66:fe:7c:f8:b1:be:88:5f:b7:8a:
                    9b:e9:2f:4a:22:95:3f:9e:a2:a0:e6:85:8d:45:6b:
                    a9:1d:6a:8a:dc:a9:1e:fe:bd:9c:ea:30:0e:43:c8:
                    0b:19:62:fa:0f:56:d7:66:d2:d7:cb:d2:1c:0e:52:
                    7c:f2:db:49:b3:39:e9:c0:5a:5a:c5:ef:13:ff:8c:
                    e2:5f:12:c6:87:50:89:6d:23:36:4d:72:05:1b:cf:
                    14:42:da:08:23:97:00:e0:4c:50:03:3b:9e:36:fb:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:A3:B8:D9:0E:A7:C4:88:38:DB:98:F0:D0:C1:0B:56:CF:4D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl

            X509v3 Authority Key Identifier:
                keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.6.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:23:25:a2:db:8e:6c:05:4e:d3:af:c2:ea:56:15:ab:93:
         95:3b:82:fe:67:d3:27:8f:48:70:98:56:3f:ee:96:d3:42:d6:
         d7:91:5f:e5:41:02:f0:fd:05:0c:82:0d:e8:e2:f9:e1:96:b0:
         7d:09:e9:06:1d:a4:be:d5:58:7e:f6:4f:38:9f:15:6d:3b:38:
         b5:0f:7e:f2:3c:c0:a3:4f:81:d1:99:53:77:4c:5d:c6:f0:25:
         ea:46:37:99:10:ac:cb:32:1c:c5:86:33:e2:3a:6c:22:95:0a:
         2d:4f:ff:9b:f9:91:b5:72:09:4e:e7:29:72:ec:f1:d3:e2:b6:
         24:b0:25:a1:d4:37:60:91:f6:e8:95:96:8a:5e:d2:36:31:16:
         ad:0c:6e:9d:00:41:c2:9a:4e:6d:49:2c:d2:74:b4:81:ea:52:
         ce:01:8c:8e:ad:56:cb:90:1d:7c:08:55:c0:1e:5e:a3:38:8e:
         38:a1:a2:56:24:ed:3f:f3:60:45:71:5d:2f:13:31:78:61:52:
         8f:a5:6f:ca:01:a3:23:62:01:d8:66:4e:ab:e8:fb:7b:cf:17:
         f2:0f:58:ff:64:66:44:a0:91:71:2e:48:d1:bc:5e:47:ae:ca:
         8e:60:aa:e4:14:04:93:be:83:d0:ee:7a:40:dd:c7:8a:3d:79:
         41:fd:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:50 2024 by rpki-client on console-fra.rpki-client.org