Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa
File:                     1dd583f8-9804-34c8-ae29-0206a0aff754.roa (raw, json)
Hash identifier:          dxdaG0KIkjtn5l1lHvYzdf2x2ui2Nqcsgz3RUDg3h1Q=
Subject key identifier:   00:8D:24:06:A1:CE:EC:60:D7:CE:6E:56:EB:49:8B:FA:D2:9B:D5:94
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285847BAC6AFF502810754C5A61980
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     5738
IP address blocks:        209.198.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:af:f5:02:81:07:54:c5:a6:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=19f3359f-bffd-4de4-9795-41ed1eb000e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:5c:f9:79:2a:ec:86:72:2f:08:5f:38:bc:
                    d8:9d:71:bc:9b:3d:5d:e4:dd:e8:56:87:b1:70:91:
                    89:65:c7:9e:5c:60:32:8e:3f:fa:2c:98:0b:15:ec:
                    16:be:ff:44:67:36:44:e8:00:c0:c2:c0:a0:35:c8:
                    e8:4b:c1:f2:92:c5:77:db:88:64:23:cf:0c:39:18:
                    09:f4:d4:93:81:50:44:ac:ac:21:1a:cc:6c:9a:45:
                    e8:d7:a6:00:73:4c:13:7c:a1:1c:f8:0a:b1:e2:39:
                    1c:27:11:dc:33:e4:b7:7a:a5:00:ed:9a:8e:c2:8f:
                    e0:9e:51:e9:5c:cb:1b:77:78:ce:a9:60:b9:52:08:
                    84:d3:7f:01:5e:be:11:6f:49:47:1c:71:2c:e0:4e:
                    43:9a:f4:a7:5d:f0:ea:00:1c:33:b2:aa:5d:99:cb:
                    93:82:7c:fd:6d:ce:89:9d:9e:45:5e:b1:4d:0d:f0:
                    83:61:83:fe:27:c5:c9:25:78:32:e8:56:16:9b:a5:
                    33:c0:c8:50:aa:9e:33:d3:37:61:97:bc:25:82:fa:
                    e8:b3:1f:8b:cf:12:49:71:83:bb:87:c2:a2:98:7a:
                    b5:e9:ee:9e:71:25:4c:4f:98:dd:d2:ac:b9:ab:d8:
                    0f:e9:42:36:21:d6:ac:74:7d:4c:bf:f7:18:84:f2:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:24:06:A1:CE:EC:60:D7:CE:6E:56:EB:49:8B:FA:D2:9B:D5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:60:24:32:fa:16:6c:93:36:ff:9d:0a:77:58:9b:c7:51:11:
         ed:51:3c:51:9c:a3:12:7e:99:89:7c:ec:cc:95:c6:ea:22:9d:
         9c:28:17:c8:7c:12:05:e4:63:42:0f:08:42:a5:b8:5f:89:10:
         f9:7e:ca:1a:61:15:12:a6:df:26:d4:ef:85:c5:6d:51:39:2d:
         b4:83:27:7c:6c:31:6f:22:71:f2:a5:8b:07:80:db:a8:a1:b6:
         58:36:f8:fe:a8:63:d9:75:89:a7:fa:4d:95:9f:f6:0d:7a:ac:
         bd:db:b0:9a:a4:7a:02:a4:f0:06:24:f1:7d:20:93:3f:7b:3a:
         b8:0e:d7:7d:30:12:31:09:63:eb:ff:8b:6f:00:f9:da:8e:53:
         f6:53:fa:18:ca:95:a8:0c:9a:cb:41:bf:65:f1:79:0d:89:19:
         da:ff:70:d8:a0:6f:4e:f2:2e:5d:23:b7:54:a3:ba:41:50:4b:
         b3:a9:4c:1e:50:d8:17:ab:db:74:66:61:d4:44:38:64:39:12:
         ac:2e:4a:33:c7:69:66:e9:fe:72:1d:60:97:6e:47:5f:80:39:
         6f:8b:d5:63:e8:5b:d5:1d:62:fd:8e:01:70:05:1c:cc:0b:04:
         da:51:f2:fd:2e:2a:62:02:86:3c:29:8a:6c:de:99:6d:68:e9:
         73:88:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:22 2024 by rpki-client on console-fra.rpki-client.org