Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa
File:                     ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa (raw, json)
Hash identifier:          cQnWrK32yUTPrXlG4QY6alg1uABIL0fDN95K2ObOtrY=
Subject key identifier:   E0:CC:9E:7C:A4:A0:61:14:D9:63:FF:4E:6A:F2:5C:D8:D6:07:D8:E2
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F43285847537B5FB5F3FAFBEF1772D300
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     20454
IP address blocks:        69.160.32.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5f:b5:f3:fa:fb:ef:17:72:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=6eba61cf-238c-447c-b0cf-4373876b5cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:cd:ee:3d:fe:48:0a:7c:0c:c3:c6:ed:24:
                    33:16:bb:d7:f1:b6:9d:9d:e8:64:af:44:7f:ea:ba:
                    a7:76:57:9c:53:b7:cc:52:e9:03:e3:5c:68:97:8b:
                    14:a0:17:75:19:d8:f2:35:bb:b8:68:e3:86:0e:56:
                    38:60:2c:05:81:62:da:13:c7:e8:85:d0:b5:97:ab:
                    4f:11:ec:52:79:03:54:35:50:83:df:e1:bf:82:17:
                    76:d9:fb:c1:44:1c:01:44:40:83:c3:43:23:a7:52:
                    3c:7f:7a:61:16:05:ee:7d:52:bb:75:87:d7:db:8d:
                    1a:54:3e:52:43:c2:c4:7a:3c:f5:1c:2e:38:7c:f2:
                    8a:3c:a0:55:fe:4d:7f:f6:50:97:68:da:2d:39:f4:
                    16:58:8e:77:fc:fd:4b:16:e6:85:52:99:2e:4e:ed:
                    f0:fd:03:dc:be:ac:55:33:1d:a5:2b:6d:29:c7:d0:
                    02:3d:73:ef:60:88:2e:04:7c:28:be:52:f1:88:cc:
                    e4:ce:c8:06:ac:7b:26:59:ac:66:18:2c:65:e4:5f:
                    30:8c:8f:27:ef:32:f2:54:a8:68:e7:cb:94:b4:02:
                    dd:86:ef:57:5c:66:4b:60:bb:5b:09:16:72:64:ba:
                    d5:19:ce:ba:5c:02:0b:14:17:d3:67:b7:73:41:23:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:9E:7C:A4:A0:61:14:D9:63:FF:4E:6A:F2:5C:D8:D6:07:D8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:5c:8f:46:54:04:9b:ac:a5:fa:dc:cd:8f:a5:b1:06:c2:
         32:71:20:b2:ce:57:8c:3d:6b:a9:9d:5d:f5:98:2d:13:35:3b:
         21:2b:a1:38:52:80:5a:26:ff:9b:dd:fd:fe:15:b5:0e:47:42:
         c5:25:12:cb:15:f6:44:1a:61:a9:8d:a0:c6:ac:b0:f2:4e:9a:
         c3:d6:c7:00:85:2d:37:ce:c2:72:89:0e:6d:d0:42:ed:0b:80:
         7e:c6:bf:dc:2d:5a:95:c1:aa:35:72:78:7a:51:2b:f7:26:e4:
         c3:64:16:ba:98:86:48:2b:a3:19:fa:d7:9c:79:48:f8:f8:f8:
         42:40:8c:39:42:dc:98:17:4c:40:0d:05:2f:c9:01:f0:8a:bd:
         e8:49:e3:d7:84:6d:39:70:8b:3e:ec:d0:5d:4a:31:8f:0f:0e:
         14:2c:2c:61:ab:00:d3:3b:56:a1:29:d9:97:01:18:b9:96:ef:
         70:c5:ec:ae:f3:56:18:07:29:69:aa:5a:77:36:37:2c:8a:ed:
         c2:d3:b5:7f:ca:96:12:70:ab:a7:67:0f:4d:21:f3:05:b2:e6:
         96:5c:42:0e:bd:d4:ab:b3:a0:b2:60:7f:09:ab:4d:61:85:67:
         11:8d:3f:64:78:b1:4c:b1:0d:64:9f:11:cb:63:89:9c:44:e4:
         36:23:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:28 2024 by rpki-client on console-ams.rpki-client.org