Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa
File:                     6b11d489-fe5c-3318-8635-526482027dc2.roa (raw, json)
Hash identifier:          BPZRmTbAUgI3mm+Fo5+Ppk2FZB+cVf5vIYFTvROuLFg=
Subject key identifier:   10:B4:00:41:4E:16:AA:6B:94:24:59:82:08:64:21:C0:66:B9:39:56
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285847D4049C3B84D165ECE3F53400
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     21840
IP address blocks:        64.113.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9c:3b:84:d1:65:ec:e3:f5:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=e2ae122c-6762-41cb-874a-3a75f2428b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:cd:dc:34:7b:ab:04:a1:90:b0:49:fa:c6:
                    02:12:b0:20:5d:ca:79:7f:03:88:70:81:78:91:75:
                    00:81:5f:29:20:f8:9c:21:89:ec:85:df:0e:af:dd:
                    eb:86:0d:9f:5d:40:2c:de:02:c6:7f:72:ae:eb:1f:
                    52:9c:f4:fa:c8:9d:22:10:b8:b2:51:24:fb:71:04:
                    5c:7a:b4:a6:56:b3:d8:1f:14:f3:38:2d:a1:a0:87:
                    c9:f4:a0:c7:44:8f:ba:ae:34:16:ae:7c:bf:36:2b:
                    23:3d:e7:e3:f0:d6:8f:35:31:85:80:02:6c:b3:6e:
                    0a:01:87:d5:8f:29:4d:59:d2:fa:7f:91:e9:e3:f8:
                    3e:1b:cf:b1:37:df:c1:f0:69:f2:e2:e5:39:f5:ac:
                    ec:ee:bd:3c:5a:b9:82:e7:90:16:ee:86:e6:86:a8:
                    67:29:7c:35:d3:c2:c1:2f:17:97:d3:4a:36:15:92:
                    7c:28:6e:d6:cf:94:60:40:b4:64:7f:5f:d6:46:8f:
                    83:e4:6b:84:d1:b5:ff:91:26:c5:cb:af:9f:a7:5d:
                    46:a6:14:80:cb:53:66:cf:2f:3a:88:90:8a:e1:5d:
                    87:6b:40:b4:4c:1b:00:e0:d6:67:cc:92:4e:7c:47:
                    bc:a3:20:96:87:fb:ff:00:2e:84:bb:7f:4a:15:ba:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B4:00:41:4E:16:AA:6B:94:24:59:82:08:64:21:C0:66:B9:39:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:d2:a6:5c:e0:f6:7f:29:af:77:31:47:b9:b3:b3:f8:29:
         a5:b1:17:6c:a4:17:67:13:63:2f:d9:c6:54:6b:f7:6f:e5:30:
         16:e2:32:08:30:3a:0f:94:77:e9:5f:09:e6:cc:a1:a1:c0:b2:
         3e:af:a3:ac:68:c8:a9:ff:30:c9:1e:ab:93:14:c9:03:2b:1e:
         96:25:0f:e1:5a:5b:af:22:e9:c9:a1:59:c5:fd:2b:d7:94:9c:
         f1:4b:5e:47:bd:24:d9:1f:ee:08:68:13:15:25:b6:79:55:fb:
         5a:9d:78:4d:85:f9:5f:49:36:59:cc:80:bb:3d:19:6d:9c:86:
         b1:04:38:05:b5:a5:67:8d:61:e0:be:ed:3a:e7:ab:75:a1:68:
         43:c6:00:69:42:e7:d0:95:7d:cf:fe:a2:7d:83:95:7c:62:62:
         e4:b2:e4:a1:be:89:da:c5:0b:25:05:4d:f0:2e:6b:64:1b:76:
         84:87:64:3b:ba:34:e2:b9:81:be:c8:8c:15:fb:7e:38:0b:ff:
         dd:62:d0:48:16:e8:f8:9f:ed:a5:9d:10:c0:24:a8:3d:53:79:
         06:7e:0c:03:6e:23:15:ab:87:12:ed:e2:78:ce:f0:c5:06:17:
         f0:88:85:0f:80:8b:35:cb:c0:ee:4e:7e:a8:c1:06:ec:27:7d:
         21:bc:66:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:35 2024 by rpki-client on console-ams.rpki-client.org