Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
File:                     7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json)
Hash identifier:          0Jcg2O+UARHxv5tb441/U8FVc2dRMOp0Br9i9yVJpig=
Subject key identifier:   BA:EB:15:C1:9C:9F:44:D5:B9:F4:5C:95:F2:C0:9E:A6:74:F4:4F:85
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285847F2BA3999581A8F27C1452480
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     25645
IP address blocks:        137.239.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:39:99:58:1a:8f:27:c1:45:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=2b0a8348-936a-489a-8fa7-0dc7a1fe16fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:dc:79:28:58:41:a7:b3:d0:49:3d:74:83:
                    ca:79:7a:91:c0:09:02:0f:73:80:ee:8d:b4:3a:2d:
                    0f:0c:53:40:da:55:6d:02:2e:7b:46:7b:df:7b:27:
                    75:5b:3b:77:3d:98:e7:2f:6d:0a:d8:19:b2:4c:cd:
                    e9:dd:59:db:2c:41:e1:a9:2a:d5:46:3b:94:fc:f7:
                    6b:2c:1c:d2:fd:28:5c:00:10:7b:59:2d:4c:8d:37:
                    5a:19:c7:b3:ba:f3:b8:6c:54:58:3c:c2:d0:d2:a1:
                    f0:39:67:bf:46:27:83:56:c7:44:fb:08:85:4d:f1:
                    9d:5c:1d:d9:fd:c7:7d:af:1b:93:b8:c6:b1:68:4d:
                    d5:d1:89:73:f2:e0:8f:99:18:63:f0:f0:13:ef:ed:
                    99:fc:e2:2b:f1:64:3d:26:c2:5c:21:71:9e:23:2e:
                    40:b7:79:49:62:6d:18:a6:90:8d:5b:ee:d5:56:ae:
                    86:e7:53:3d:de:9c:1e:cf:6a:63:40:3d:7c:3e:f9:
                    cb:66:03:a2:36:9e:51:78:b9:67:2b:56:27:22:75:
                    bd:b5:f1:7d:5b:e6:f7:e1:52:b9:39:9f:6a:f2:df:
                    7d:95:16:4f:71:44:fd:5e:a3:f9:30:c9:a4:26:d7:
                    42:79:a1:f4:5c:58:65:d1:01:79:16:63:e7:86:78:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:15:C1:9C:9F:44:D5:B9:F4:5C:95:F2:C0:9E:A6:74:F4:4F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:37:c5:9f:96:d3:93:cc:2e:91:34:d6:e8:50:ef:c4:06:bf:
         87:3e:df:5c:69:8c:ac:09:47:b4:c6:de:71:6c:64:ee:17:73:
         c9:b2:08:5e:75:ea:29:dd:68:f6:2d:86:e8:05:29:e0:ce:a6:
         57:f1:45:97:99:7b:41:35:1e:29:b6:1a:aa:7f:fc:ee:8c:1f:
         1e:b7:4a:f7:de:96:b0:98:12:46:89:f8:c9:b8:4a:93:3c:c8:
         cf:7b:f1:1b:27:d7:7b:14:8e:5f:42:79:b8:c7:eb:a5:c6:48:
         88:13:af:d7:17:54:4e:30:03:d3:6c:e7:1b:16:35:96:1a:ad:
         57:57:75:90:c1:6c:c5:61:4e:a0:b4:56:f7:12:ee:00:94:f9:
         c5:d3:77:00:9e:6e:77:58:9b:0e:39:9c:ee:13:95:dd:07:9f:
         69:15:ff:bc:18:18:28:06:0c:8a:f2:b0:d0:01:9c:f0:9f:69:
         69:28:22:49:1c:14:cd:50:43:dc:c9:fd:27:2f:ff:45:24:14:
         aa:1d:b0:ad:62:ee:15:2f:cf:5a:4b:60:da:a4:57:f8:00:30:
         18:d4:04:2c:0f:f5:e8:db:85:b8:3b:1b:dd:bf:6f:5c:05:0d:
         33:7c:34:9b:71:34:21:f1:c8:9f:f1:78:d2:5d:61:08:33:22:
         48:e1:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org