Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/3af2b5bd-1917-3ba7-a4ab-74f6cf47d2fe.roa
File:                     3af2b5bd-1917-3ba7-a4ab-74f6cf47d2fe.roa (raw, json)
Hash identifier:          TqrNbB/JQWywGjdKv1kSSZJ2kpAYIRgrH0unBWCBSd0=
Subject key identifier:   79:E8:15:97:8A:14:75:B3:EB:33:FD:67:3B:09:A9:2E:3B:3E:38:B4
Certificate issuer:       /CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
Certificate serial:       010D0C9F43285847CE6F3E5D9A5722BC0EB92500
Authority key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/3af2b5bd-1917-3ba7-a4ab-74f6cf47d2fe.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     376
IP address blocks:        205.236.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3e:5d:9a:57:22:bc:0e:b9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=af5e6fdc-ce5a-4596-9bd3-e6a3f8817b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:e5:17:95:84:aa:80:21:64:bb:91:a4:ab:
                    6a:8c:28:02:0f:2c:f8:c0:b5:f5:51:0a:35:ff:42:
                    dd:de:84:2e:48:9b:5f:96:df:5d:6a:85:31:1f:1a:
                    fc:32:25:28:24:46:e1:e6:c9:0d:11:7f:81:c3:1c:
                    f9:4d:95:ff:37:41:17:f4:a7:eb:60:25:1e:d8:81:
                    6a:5e:14:36:44:98:86:f7:59:8c:f0:f4:2a:81:61:
                    8d:9f:fb:af:60:57:87:04:be:3c:ba:6a:ae:5c:d6:
                    e8:21:b9:39:8d:75:54:90:04:08:6b:1d:15:b7:69:
                    0d:5f:bb:62:4c:48:35:f6:3c:4d:05:8e:44:90:3a:
                    ea:f1:2c:1b:35:4e:49:bb:60:fb:af:c6:8d:88:aa:
                    e7:31:dd:e4:98:a9:dd:80:5e:0a:88:ad:da:63:6a:
                    93:a8:ce:3d:cf:ae:e0:2b:90:f9:51:4c:c8:4d:f9:
                    d2:30:e9:40:65:21:51:b7:4e:91:c6:ac:c2:89:a2:
                    94:3b:41:e8:9d:c6:33:0b:41:4f:4b:f0:df:08:95:
                    92:a1:e0:74:ef:35:3f:19:6e:18:a6:0c:c6:ef:cf:
                    78:f1:5b:ee:5c:d7:25:42:79:bb:26:ff:26:b4:2e:
                    c4:84:7c:dd:4a:a7:05:fd:c4:6e:21:11:12:3a:32:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:15:97:8A:14:75:B3:EB:33:FD:67:3B:09:A9:2E:3B:3E:38:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/3af2b5bd-1917-3ba7-a4ab-74f6cf47d2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl

            X509v3 Authority Key Identifier:
                keyid:AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:05:a0:b1:f6:ad:37:82:9f:f4:11:b9:b2:52:4e:68:31:6f:
         8f:37:92:15:91:68:32:8a:fe:69:f9:87:70:99:56:7b:27:79:
         d0:d7:43:3b:32:d9:c9:e1:69:55:71:3b:1e:95:4a:9b:3f:52:
         b7:e5:c3:6f:cf:f8:68:e5:ac:40:ac:ec:95:36:a9:81:ef:0b:
         05:aa:ea:e1:53:92:77:13:03:a7:61:b7:0c:cd:eb:68:22:27:
         89:3d:14:f6:29:3a:df:4c:e9:a5:28:cf:f9:04:3c:43:69:ac:
         88:25:57:0e:44:03:c4:f8:5e:b9:df:94:53:7c:a7:87:3f:e2:
         d7:09:23:80:3c:c7:c6:8f:c8:43:a8:5a:d4:72:83:12:87:3c:
         31:8f:60:a1:76:aa:fc:74:1c:37:ff:77:15:d1:d3:85:f8:2c:
         c4:be:50:07:a6:65:d0:4b:17:99:99:43:ca:9d:69:21:41:47:
         73:ef:99:82:ba:3c:08:b6:39:9f:af:e0:58:94:2a:51:70:d1:
         a3:d9:7c:10:db:9e:7f:fa:31:8f:d0:3d:8c:0e:a9:f0:b4:50:
         a5:ce:6a:d5:ab:b0:ba:29:31:bb:87:40:bd:9a:50:37:1c:b5:
         2e:00:87:3c:4a:d2:67:b5:d2:90:65:e6:b6:c6:06:3a:7f:fe:
         af:27:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org