Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
File:                     79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json)
Hash identifier:          3tANrG/nlAUu21Y+282E9hFbbbCTVmkJfaRNKonc67c=
Subject key identifier:   EE:72:62:6E:BC:8A:CF:BC:EA:5F:20:30:47:20:FC:E8:FD:C2:34:BA
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F43285847DC64B037784B53C8EE7E1780
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     7922
IP address blocks:        209.250.11.0/24 maxlen: 24
                          209.250.21.0/24 maxlen: 24
                          209.250.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:b0:37:78:4b:53:c8:ee:7e:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=ba302ccd-f2cf-4c4f-9f85-c692d2ea7bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:6e:9d:14:1a:90:d6:5d:13:13:5d:6d:0e:
                    0e:1f:e4:a5:d1:ee:3d:03:3b:51:0d:dc:f2:61:50:
                    b1:12:98:b9:1e:72:51:c6:c1:56:56:02:36:b2:09:
                    d9:b6:4f:80:22:3a:9e:75:2e:59:16:62:68:85:e4:
                    a7:ec:55:d0:86:b5:01:b0:4d:a3:43:14:84:3a:74:
                    1d:20:24:c8:38:72:dc:b9:21:fd:e7:76:7b:0d:bf:
                    54:99:40:ee:ec:8e:6b:53:4c:f8:a1:61:4e:e4:f9:
                    dc:45:5f:fa:dd:ad:60:a1:e6:e6:37:4e:3b:44:6a:
                    8b:5d:6d:1c:e6:97:ff:73:d5:4e:71:e7:0e:25:22:
                    6f:89:bb:3d:28:05:40:fe:5b:ff:ba:42:fc:2c:5f:
                    41:d1:e3:4d:f4:01:06:00:c0:b3:25:51:31:ee:7e:
                    03:65:d7:8e:03:72:ba:eb:76:d0:62:66:63:43:48:
                    d3:1c:d3:34:5f:9a:94:59:5d:f7:5b:a0:44:04:a4:
                    01:0c:d5:16:53:51:59:67:c1:d8:13:1e:b7:87:90:
                    55:74:b2:16:8e:4e:2a:cb:67:b4:e0:ec:83:2e:47:
                    af:2b:28:59:7e:d3:14:3f:68:ba:86:fd:fe:ab:4a:
                    a2:ea:f7:0e:7b:0a:b7:f2:85:f4:fc:dd:d5:57:0d:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:72:62:6E:BC:8A:CF:BC:EA:5F:20:30:47:20:FC:E8:FD:C2:34:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24
                  209.250.21.0-209.250.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:37:b4:0b:6d:cc:86:a2:26:83:ec:e2:bf:0a:79:e9:2e:42:
         3b:21:f2:41:f1:dc:e6:78:2e:c5:09:1a:b9:0d:10:3b:d4:19:
         eb:db:68:7a:2d:77:26:aa:db:9b:50:be:ee:68:c7:a6:de:63:
         3a:85:6b:9b:80:3f:0a:b5:e1:0e:ef:0a:b8:7b:27:7e:0d:83:
         b0:95:49:d2:b5:33:16:5c:ac:4e:b3:8d:12:7d:50:d0:72:76:
         f3:bc:d5:5a:f3:f7:dd:92:42:bd:3d:2f:fe:2b:fe:6a:54:d8:
         53:5d:da:ca:e2:7e:c4:6d:36:37:a9:71:45:3e:9c:d5:42:97:
         60:7c:4b:88:ee:7c:10:01:46:11:6a:1b:71:59:0b:7a:f4:ff:
         f6:93:aa:15:4e:fb:12:9b:a6:04:e2:9d:be:22:8f:a2:4b:6f:
         f4:57:a1:44:2a:97:0e:48:46:d7:fc:ed:dd:55:ed:d9:79:b9:
         04:49:6f:5f:cd:73:73:9c:91:38:fc:5d:c6:32:66:c2:96:8c:
         a5:d9:98:5a:16:d6:48:71:01:34:79:ea:57:a8:5a:e4:ec:0f:
         1f:52:5e:50:a7:8a:e5:4b:d8:f2:9b:99:97:aa:8f:f2:84:e6:
         7b:80:91:d1:3f:61:0b:a8:da:28:98:3d:ea:9a:83:c6:3a:8f:
         6d:0b:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org